Lucene search
+L

136604 matches found

CVE
CVE
added 2026/07/28 12:0 a.m.14 views

CVE-2026-51266

CVE-2026-51266 is rejected/not used and does not represent an active vulnerability entry.

6.4AI score0.00626EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.14 views

PT-2026-65651

Summary JSON-Schema $ref values pointing at HTTP or HTTPS URLs are silently dereferenced by datamodel-code-generator with no IP/host validation, no scheme allow-list, and redirects followed unconditionally. The --allow-remote-refs gate added in 0.56.0 defaults to None, which only emits a...

8.2CVSS6.3AI score
SaveExploits0References5
Packet Storm News
Packet Storm News
added 2026/07/28 12:0 a.m.10 views

A Structuration Approach to Theorizing Cybersecurity Practice: The STARC Model

The problem: Cybersecurity practice runs simultaneously across analysts, teams, organizations, sectors, and regulators, co-evolves with adversaries, and increasingly blends human and algorithmic decision-making. The theories applied to it operate at single organizational levels and cannot explain...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.6 views

MiracleLinux 8 : dotnet8.0-8.0.129-1.el8_10.ML.1 (AXSA:2026-1370:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1370:14 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References18
OSV
OSV
added 2026/07/28 12:0 a.m.13 views

ALBA-2026:47115 None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

5.8AI score
SaveExploits0References2
CVE
CVE
added 2026/07/28 12:0 a.m.19 views

CVE-2026-51275

The CVE-2026-51275 record is supported by connected sources indicating a concrete issue in schreibfaul1 ESP32-audioI2S 3.4.5. The vulnerability is a heap-based buffer overflow in the ID3v2 APIC frame parsing within audiolib, caused by missing length validation of the APIC frame size. This leads t...

6.6AI score0.00407EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65612

Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.9.1 through 0.60.1 Description An issue exists where the software silently dereferences HTTP or HTTPS URLs provided in JSON Schema $ref values without performing IP or host validation, scheme allow-listing, ...

8.2CVSS5.8AI score0.00216EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.11 views

PT-2026-65650

Summary When the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @field validator... decorator from each entry. The field names and the validator mode are interpolated into the...

7.8CVSS6.4AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 12:0 a.m.16 views

CVE-2026-51269

This CVE-2026-51269 entry is rejected/not used and does not represent an active vulnerability.

6.4AI score0.0043EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.6 views

CVE-2026-51254

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00126EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65639

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.10 views

CVE-2026-51259

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00373EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:0 a.m.6 views

CVE-2026-51267

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.4AI score0.00542EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65665

Summary datamodel-code-generator's built-in HTTP fetcher http.get body issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and follow redirects=True. Loopback addresses, RFC1918 ranges, link-local...

8.2CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65684

Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...

7.5CVSS5.9AI score
SaveExploits0References5
AlmaLinux
AlmaLinux
added 2026/07/28 12:0 a.m.11 views

None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.10 views

PT-2026-65642

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

7.5CVSS6.8AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 12:0 a.m.10 views

CVE-2026-51274

The CVE-2026-51274 entry relates to the schreibfaul1 ESP32-audioI2S 3.4.5 stack, where the heap-based buffer overflow occurs in the ID3v2 SYLT synchronized lyrics parser in audiolib. Root cause: missing bounds validation on attacker-controlled frame size and improper memory access during lyric pa...

6.7AI score0.00414EPSS
SaveExploits0
Broadcom
Broadcom
added 2026/07/28 12:0 a.m.7 views

OpenSSL 3.5.0 < 3.5.4 Multiple Vulnerabilities in SANnav images

The version of OpenSSL installed on the remote host is prior to 3.5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.4 advisory. - Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...

7.5CVSS7.3AI score0.02251EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/07/28 12:0 a.m.35 views

July 28, 2026—KB5101681 (OS Build 28000.2608) Preview

None None...

5.8AI score
SaveExploits0
Rows per page
Query Builder