72637 matches found
CVE-2026-59831
GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...
CVE-2026-8848
creationtimestamp| type| source ---|---|--- 2026-07-09 23:11:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqyjvs3y2d 2026-07-10 05:58:57+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbhrulgss2o...
CVE-2026-7558
creationtimestamp| type| source ---|---|--- 2026-07-09 23:10:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqxvy5mo2c...
CVE-2026-59269
creationtimestamp| type| source ---|---|--- 2026-07-09 23:09:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqupneqf2s 2026-07-10 03:34:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116893578077059959...
CVE-2026-31984
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...
CVE-2026-31981
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap3mupjq2d 2026-07-10 17:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp37tmox2d...
CVE-2026-14342
creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap2iz3s32s...
CVE-2026-12418
creationtimestamp| type| source ---|---|--- 2026-07-09 22:35:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoymz6fi2d...
CVE-2026-31983
creationtimestamp| type| source ---|---|--- 2026-07-09 22:34:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoxiphid2s 2026-07-10 17:27:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcobkhby62f...
CVE-2026-13450
creationtimestamp| type| source ---|---|--- 2026-07-09 22:32:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaotjnlbc2a...
CVE-2026-31982
creationtimestamp| type| source ---|---|--- 2026-07-09 22:31:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaorjqils2e 2026-07-10 17:26:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoa34a5y2y...
CVE-2026-12406
creationtimestamp| type| source ---|---|--- 2026-07-09 22:30:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoqckz5u2z...
CVE-2026-57501
Summary: CVE-2026-57501 affects Zen, a Firefox-based browser. Before version 1.21.5b, the contextual actions “Open link in glance” and “Split link in new tab” could load a page-controlled link URL with the System principal rather than the originating page’s principal, allowing a malicious page to...
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link t...
CVE-2026-55424
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-39243
decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...
GHSA-PX5M-H76G-P7P8
creationtimestamp| type| source ---|---|--- 2026-07-09 22:12:01+00:00| seen| https://gist.github.com/alon710/7957cb9c4dd6636892863390d2a98c29...
CVE-2026-55424 Discourse: Topic featured link susceptible to stored XSS
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
EUVD-2026-42733
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...