147471 matches found
CVE-2026-42603 OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target
OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Prior to 2.1.2, .github/workflows/pre-commit-fix.yaml uses pullrequesttarget privileged trigger but checks out and executes code directly from the attacker's fork, enabling...
CVE-2026-8292
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarelparse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument hnrf-uri leads to denial of service. The attack may be performed from remote. The exploit has...
GHSA-8P4X-WR7X-3788 python-liquid: Absolute paths escape filesystem loader search path
Impact The built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows malicious template authors to load and render arbitrary files via the % include % and % render % tags. Targeted files...
CVE-2026-44198
CVE-2026-44198 (Wagtail) : An improper permission handling flaw allowed a CMS user without edit rights to access the page history report, potentially exposing sensitive information. Affected: Wagtail prior to 7.0.7, 7.3.2, and 7.4. Remediation: patch releases 7.0.7, 7.3.2, and 7.4 include the fix...
CVE-2026-44197
CVE-2026-44197 affects Wagtail (Django-based CMS). Before versions 7.0.7, 7.3.2, and 7.4, a CMS user without page-edit permission could access page revisions via the revision-compare view by guessing revision primary keys, potentially exposing sensitive information. The issue is described as impr...
CVE-2026-8289
A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smfnsmfhandleupdatedatainvsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile leads to denial of service. Remote exploitation of the attack is...
CVE-2026-8290
A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smfnsmfhandleupdatedatainvsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been released to...
MINI-WH42-3H3R-CH4F
Bulletin has no description...
MINI-RX62-2V2P-75QP
Bulletin has no description...
MINI-PG4H-3P4V-MVXR
Bulletin has no description...
MINI-53F9-MHRR-4QXM
Bulletin has no description...
MINI-HP54-GHC4-3JX5
Bulletin has no description...
MINI-JGCM-W73M-6G73
Bulletin has no description...
MINI-PQ6G-6426-MVR5
Bulletin has no description...
MINI-F2XP-Q64M-Q49G
Bulletin has no description...
MINI-GP2F-57MH-XGM2
Bulletin has no description...
MINI-QGCH-M594-JGH5
Bulletin has no description...
MINI-HV6G-57H3-RC2G
Bulletin has no description...