65910 matches found
CVE-2026-23879
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parselinktext function of mistune/inlineparser.py, which performs a regex search inside a loop that advances one character at a time when parsing fails, producing On² behavior...
CVE-2026-53130
creationtimestamp| type| source ---|---|--- 2026-06-24 19:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2mccyrik2f 2026-07-06 06:48:56+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:26:13+00:00| seen...
CVE-2026-56130
creationtimestamp| type| source ---|---|--- 2026-06-24 18:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2lukil662t 2026-06-25 10:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4bf7ic4j2j...
CVE-2026-53117
creationtimestamp| type| source ---|---|--- 2026-06-24 18:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2lqfxdsf2o...
CVE-2026-53128
creationtimestamp| type| source ---|---|--- 2026-06-24 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2l6ivx4f2c 2026-07-06 06:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:26:10+00:00| seen...
CVE-2026-53125
creationtimestamp| type| source ---|---|--- 2026-06-24 18:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kvkeajd2o 2026-07-23 21:23:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrj7lafh2x...
CVE-2026-48709
creationtimestamp| type| source ---|---|--- 2026-06-24 18:35:05+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-f637-w7p2-m7fx 2026-06-24 18:43:21+00:00| seen| https://gist.github.com/alon710/f2b2f51072808beda8e52a43b0bdd064 2026-06-24...
CVE-2026-53116
creationtimestamp| type| source ---|---|--- 2026-06-24 18:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jwwelnj2c...
CVE-2026-49851
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-49851
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-53129
creationtimestamp| type| source ---|---|--- 2026-06-24 18:16:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jkgsgap2i...
CVE-2026-53124
creationtimestamp| type| source ---|---|--- 2026-06-24 18:12:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jdhyq422q...
CVE-2026-53118
creationtimestamp| type| source ---|---|--- 2026-06-24 18:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jabs7vk2p...
CVE-2026-53947 Ghost: Member existence leak via magic link sign-in response
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is...
CVE-2026-53947 Ghost: Member existence leak via magic link sign-in response
Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. This vulnerability is...
CVE-2026-53947
Ghost (Node.js CMS) contains a member existence leak via the magic link sign-in flow in versions 5.18.0–6.21.0, caused by differing responses from the members signin endpoints. An unauthenticated user could confirm whether an email is registered on a Ghost site. The issue is fixed in version 6.21...
CVE-2026-12537
creationtimestamp| type| source ---|---|--- 2026-06-24 17:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ie25yct2k 2026-06-29 01:20:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpfd3vdhxd2f 2026-08-08 11:50:10+00:00| seen|...
CVE-2026-11878
creationtimestamp| type| source ---|---|--- 2026-06-24 17:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2hj6q7od23 2026-07-20 05:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2l7zmipy2l...