186515 matches found
CVE-2026-76850
LMDeploy (InternLM) is vulnerable to remote code execution via unsafe pickle deserialization in its disaggregated-serving peer connector. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py deserializes peer-to-peer messages with pickle.loads() before any type validation,...
CVE-2026-68900
creationtimestamp| type| source ---|---|--- 2026-08-19 21:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtw75wv2t...
EUVD-2026-63086
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CGA-9GJH-6538-Q498
Bulletin has no description...
CGA-Q94V-QM86-6J4Q
Bulletin has no description...
CGA-868M-X9VH-PVRG
Bulletin has no description...
AZL-97032 CVE-2026-61711 affecting package moby-engine 25.0.3-19
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
CVE-2026-55088
Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts uses POST /tokenTransfer to store an author token for transfer between browsers and exposes it through GET /tokenTransfer/uuid. Although the record includes createdAt, the...
CVE-2026-16687
creationtimestamp| type| source ---|---|--- 2026-08-19 20:11:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk3gdekl2u 2026-08-19 21:39:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mthoxzoq4t2b 2026-08-20 00:50:06+00:00| seen|...
CVE-2026-71868
creationtimestamp| type| source ---|---|--- 2026-08-19 20:10:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjzz2h252c 2026-08-20 00:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthxxncdfc2b 2026-08-22 13:00:05+00:00| seen|...
CVE-2025-14600
creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjxsgklv2b 2026-08-19 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthu2ikmaa2f 2026-08-20 00:19:44+00:00| seen|...
MINI-F45G-R7Q4-4PPH
Bulletin has no description...
MINI-37G5-XC3H-MFPF
Bulletin has no description...
CVE-2026-75569
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
MINI-RFQC-GXCF-7QPQ
Bulletin has no description...
MINI-8PXQ-429F-X56P
Bulletin has no description...
MINI-R6V7-WW2M-6CPF
Bulletin has no description...