1166951 matches found
EUVD-2026-83619
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CVE-2026-93991
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CVE-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CVE-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CVE-2026-93991
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass in the ListArchivedWorkflows API. The root cause is a failure to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals (negated) operator . An attacker with namespace-scoped list...
CVE-2026-93991 Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
CVE-2026-93991
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a...
xalgorix v4.6.78
Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...
Exploit for CVE-2026-93659
CVE-2026-93659: Stored XSS in Concrete CMS Community Store Lea...
CVE-2026-85731 vulnerabilities
Vulnerabilities for packages: xeol, k8sgpt, flux-helm-controller, helm-push, cluster-api-helm-controller, manifest-tool, kyverno-notation-aws, cert-manager-cmctl, maru, tigera-operator, gitness, helm-set-status, kargo, kube-arangodb, rancher-helm, opentofu, helm-mapkubeapis, k9s...
GHSA-M37J-52J7-PJW7 vulnerabilities
Vulnerabilities for packages: xeol, k8sgpt, flux-helm-controller, helm-push, cluster-api-helm-controller, manifest-tool, kyverno-notation-aws, cert-manager-cmctl, maru, tigera-operator, gitness, helm-set-status, kargo, kube-arangodb, rancher-helm, opentofu, helm-mapkubeapis, k9s...
CVE-2026-1242
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...
CVE-2026-1242 BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...
EUVD-2026-83541
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...
CVE-2026-1242 BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...
CVE-2026-1242
The BlockSpare plugin for WordPress (Gutenberg Site Builder Blocks & Starter Sites) is vulnerable to authorization bypass in all versions up to and including 4.2.6 . The root cause is a logic error in the permission callback where an AND (&&) operator was used instead of an OR (||) operator, allo...
GHSA-W34Q-CM8F-9C5X vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, opentelemetry-go-instrumentation-fips, datadog-agent, envoy-ai-gateway, grafana-fips, distribution-fips, grafana-pyroscope-fips, grafana-mimir-fips, envoy-ai-gateway-fips, grafana-alloy, grafana-pyroscope, caddy, tempo-fips, grafana-alloy-fip...
CVE-2026-81871 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent, opentelemetry-go-instrumentation-fips, datadog-agent, envoy-ai-gateway, grafana-fips, distribution-fips, grafana-pyroscope-fips, grafana-mimir-fips, envoy-ai-gateway-fips, grafana-alloy, grafana-pyroscope, caddy, tempo-fips, grafana-alloy-fip...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...
CVE-2026-85732 vulnerabilities
Vulnerabilities for packages: xeol, k8sgpt, flux-helm-controller, helm-push, cluster-api-helm-controller, manifest-tool, kyverno-notation-aws, cert-manager-cmctl, maru, tigera-operator, gitness, helm-set-status, kargo, kube-arangodb, rancher-helm, opentofu, helm-mapkubeapis, k9s...