603 matches found
PT-2026-56024
Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.474 Description The application lacks authentication, rate limiting, and input validation at the 'POST /api/feedback' endpoint. This allows arbitrary content to be forwarded directly to a Discord webhook,...
BELL-CVE-2026-53334
Bulletin has no description...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the repository feed endpoints. An attacker can access private repository commit data by using API tokens that lack the required repository scope. Remediation Upgrade github.com/go-gitea/gitea/modules/git to...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the repository feed endpoints. An attacker can access private repository commit data by using API tokens that lack the required repository scope. Remediation Upgrade gitea.dev/routers/web/feed to version 1.26...
MINI-P25G-VG33-49M6
Bulletin has no description...
DEBIAN-CVE-2026-8926
When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a username without a password, like https://[email protected]/, curl could wrongly get and use the password for another user set in the .netrc file for that host if such a one exists and there is n...
MINI-67XJ-QWGR-J338
Bulletin has no description...
MINI-VHFM-WMCV-43JM
Bulletin has no description...
MINI-FHGC-XRCG-PJVG
Bulletin has no description...
MINI-232Q-HX75-3RFP
Bulletin has no description...
MINI-R6GP-GQVQ-GC34
Bulletin has no description...
MINI-98V6-P9C6-929P
Bulletin has no description...
MINI-6WRW-J4W8-M2P2
Bulletin has no description...
MINI-66WR-X823-JFQF
Bulletin has no description...
Znuny Generic Interface Data Compromise
The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...
MINI-M25C-G743-P99G
Bulletin has no description...
CGA-W234-3PJG-CJ46
Bulletin has no description...
CGA-482V-4W6M-PXJW
Bulletin has no description...
CVE-2026-46406
Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path /tmp/claude/response.md without UID isolation, randomness, or symlink protection. The file was created world-readable 0644 in a world-traversable...