65262 matches found
CVE-2026-9195
Progress MarkLogic Server Query Console is affected by a cross-site scripting (XSS) vulnerability in versions before 11.3.6 and 12.0.3. The issue allows a remote attacker to lure an authenticated administrator to a crafted URL, enabling arbitrary JavaScript execution in the administrator’s browse...
EUVD-2026-53397
Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into...
CVE-2026-48911
CVE-2026-48911 describes an Insufficient Verification of Data Authenticity in Apache Answer (affected up to 2.0.1). The vulnerability arises from a missing authorization check in the external-login email binding flow, enabling unauthenticated attackers to take over arbitrary user accounts by guid...
CVE-2026-71269
creationtimestamp| type| source ---|---|--- 2026-08-05 15:08:37+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043528766793055...
CVE-2026-71278
creationtimestamp| type| source ---|---|--- 2026-08-05 15:02:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdsay4d2z2h...
CVE-2026-16442
CVE-2026-16442 affects Keycloak’s SAML broker component. The IdP-initiated SSO endpoint fails to enforce whether a provider is restricted to account linking, allowing an attacker with control of a linked upstream identity to bypass login restrictions and gain full access to a local user account. ...
CVE-2026-71268
creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22...
CVE-2026-61486
creationtimestamp| type| source ---|---|--- 2026-08-05 14:50:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/eyof55exdtdoe...
CVE-2026-61891
creationtimestamp| type| source ---|---|--- 2026-08-05 14:34:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqpontbz2p...
CVE-2026-18933
creationtimestamp| type| source ---|---|--- 2026-08-05 14:33:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqom5zgp2c 2026-08-05 17:01:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043971069363515 2026-08-06 11:39:41+00:00| seen|...
CVE-2026-61483
creationtimestamp| type| source ---|---|--- 2026-08-05 14:30:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/jhvy6kzsbsna4...
CVE-2026-12410
CVE-2026-12410 affects CCleaner on Windows, specifically the Uninstaller component prior to version 7.10.1464. The issue is a local privilege escalation where a symlink/junction created during uninstallation can be followed by CCleaner when deleting the application data folder, allowing an attack...
Malicious code in multi-reqs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38937963f906d0bf3b4dac24a1a45f574aeb53cd2f268ffb9730d88bedf50bce The package's default export accepts token, password arguments and POSTs them, formatted as a Discord embed titled 'Yeni Hesap Bilgisi' with fields '...
CVE-2026-64634
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-64631
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
GHSA-M4HF-6VGR-75R2
creationtimestamp| type| source ---|---|--- 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b...
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...
CVE-2026-71248
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn3sdny23 2026-08-05 12:37:13+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msdk5vqh5r2y...