65430 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-64219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a...
PT-2026-64596
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the way the kernel handles process links. The functions proc pid get link and proc pid readlink perform a task lookup from the pid, execute a ptrace access...
PT-2026-64538
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link SL records. The functions get symlink chunk and parse rock ridge inode internal process...
PT-2026-64736
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...
CVE-2026-55971
creationtimestamp| type| source ---|---|--- 2026-07-24 23:53:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgkeq7s3y2x 2026-07-27 14:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pgxr2g2v 2026-07-28 14:07:07+00:00| seen|...
GHSA-6VCH-Q96H-7GC3
creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...
CVE-2026-48145
creationtimestamp| type| source ---|---|--- 2026-07-24 23:27:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgiw2fdhl2r 2026-07-31 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxilm2egc26...
CVE-2026-49158
creationtimestamp| type| source ---|---|--- 2026-07-24 23:13:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgi4fyong2n 2026-07-27 17:01:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnequj7z42o 2026-07-28 17:22:10+00:00| seen|...
CVE-2026-43871
creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s...
CVE-2021-25148
creationtimestamp| type| source ---|---|--- 2026-07-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrghraizdq2l...
GHSA-M3QF-58WF-W979
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...
CVE-2026-66039
creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...
GHSA-PVCR-8MVP-W8QR Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)
Summary The Budibase AI chat-link handoff flow GET/POST /api/chat-links/:instance/:token/handoff binds an external chat identity Slack/Discord/MS Teams/Telegram to a Budibase user account. The confirmation endpoint is on a public route no CSRF middleware, no auth-group gate and the only credentia...
CVE-2026-62379
creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-07-31 13:41:33+00:00| seen|...
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
Description The OAuth2/OIDC consent page rendered for display=wap authorize requests reflected several request-derived values into the HTML response without escaping. An attacker who induces a user with an active OpenAM session to follow a crafted authorize link can execute arbitrary JavaScript i...
GHSA-6V4J-43GG-VJ32 yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
Summary If the --write-link, --write-url-link or --write-desktop-link options are used with yt-dlp, it may produce output that can lead to downstream remote code execution. An attacker can craft a malicious metadata payload to achieve arbitrary command injection in the .url and .desktop shortcut...
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
Summary If the --write-link, --write-url-link or --write-desktop-link options are used with yt-dlp, it may produce output that can lead to downstream remote code execution. An attacker can craft a malicious metadata payload to achieve arbitrary command injection in the .url and .desktop shortcut...
EUVD-2026-42368
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output...
CVE-2026-12877
creationtimestamp| type| source ---|---|--- 2026-07-24 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg5ycdv322u 2026-07-25 10:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhmbx6swj2g...
