65910 matches found
CVE-2019-12768
creationtimestamp| type| source ---|---|--- 2026-06-24 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2hdkb6tm2h...
EUVD-2026-39002
Warp is an agentic development environment. From 0.2023.10.24.08.03.stable00 until 0.2026.05.06.15.42.stable01, Warp may open executable local files through the operating system default file handler. A malicious Markdown document or project can contain a local-file link that appears as normal...
CVE-2026-54699 Warp: OS command injection when opening terminal links from WSL
Warp is an agentic development environment. From 0.2024.03.12.08.02.stable01 until 0.2026.05.06.15.42.stable01, Warp contains an OS command injection vulnerability in the WSL URL-opening fallback. When Warp is running under WSL and cannot open a URL through wslview, it falls back to a Windows...
CVE-2026-53042
In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. Both use moduleinit, so cxlpcidriverinit runs first. When cxlpciprobe calls fwctlregister and then...
CVE-2020-35173
creationtimestamp| type| source ---|---|--- 2026-06-24 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2fnv6bi32r...
CVE-2026-49851
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-49851 Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. When parsing Markdown containing many consecutive characters, parselinktext repeatedly scans the input usin...
CVE-2026-49851
Mistune (Python Markdown parser) prior to 3.3.0 is vulnerable to CPU exhaustion DoS due to quadratic-time behavior in parse_link_text when parsing many consecutive '[' characters. The code repeatedly scans input with a regex inside a loop, yielding O(n^2) runtime on affected inputs and enabling a...
CVE-2026-56121
creationtimestamp| type| source ---|---|--- 2026-06-24 17:02:50+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2fgb4nax2n 2026-06-24 18:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ivxcg222z 2026-07-13 22:00:16+00:00| seen|...
CVE-2026-53042 fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal
In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. Both use moduleinit, so cxlpcidriverinit runs first. When cxlpciprobe calls fwctlregister and then...
CVE-2026-9724
creationtimestamp| type| source ---|---|--- 2026-06-24 15:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp27hg2glv2q...
CVE-2023-28802
creationtimestamp| type| source ---|---|--- 2026-06-24 15:07:47+00:00| seen| https://gist.github.com/usualdork/84d156ab09027755f4c405b2f87af230...
CVE-2021-26810
creationtimestamp| type| source ---|---|--- 2026-06-24 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp26xcjn6p23...
CVE-2026-9178
creationtimestamp| type| source ---|---|--- 2026-06-24 14:05:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp23jpf5gx2f 2026-06-25 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp5aoruwd32y...
CVE-2026-56237
creationtimestamp| type| source ---|---|--- 2026-06-24 13:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp222mff642y...
CVE-2025-71332
creationtimestamp| type| source ---|---|--- 2026-06-24 13:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozzaue52o2s 2026-06-25 11:39:45+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mp4dthrnkv2p 2026-07-14 11:07:06+00:00| seen|...
CVE-2026-57298
A cross-site request forgery CSRF vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key...