979583 matches found
CVE-2026-43174
A flaw was found in the Linux kernel's iouring/zcrx subsystem. Incorrect error handling during post-open operations allows for the direct release of zcrx ctx without ensuring that all associated page pools are properly terminated. This resource management issue could lead to system instability or...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the trainerlogin function. An attacker can redirect a user's browser to an external, attacker-controlled URL by supplying a crafted next parameter, potentially exposing sensitive information such as the original URL...
GHSA-VQV8-J3MJ-WJXJ wger: trainer_login open redirect - ?next= parameter not validated against host
Summary The trainerlogin view in wger redirects to request.GET'next' directly via HttpResponseRedirect without calling urlhasallowedhostandscheme. After the trainer successfully enters impersonation mode, their browser is redirected to any attacker-controlled URL supplied in the ?next= parameter,...
wger: trainer_login open redirect - ?next= parameter not validated against host
Summary The trainerlogin view in wger redirects to request.GET'next' directly via HttpResponseRedirect without calling urlhasallowedhostandscheme. After the trainer successfully enters impersonation mode, their browser is redirected to any attacker-controlled URL supplied in the ?next= parameter,...
CVE-2026-44112 OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes
OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and write...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
CVE-2026-41168 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
CVE-2026-41312 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
CVE-2026-41313 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
CVE-2026-41182 vulnerabilities
Vulnerabilities for packages: langfuse-fips, kibana, langfuse, open-webui, librechat...
CVE-2026-42215 vulnerabilities
Vulnerabilities for packages: checkov, mlflow, awx, mlflow-fips, datahub-ingestion-fips, open-webui, opal...
CVE-2026-42284 vulnerabilities
Vulnerabilities for packages: checkov, mlflow, awx, mlflow-fips, datahub-ingestion-fips, open-webui, opal...
CVE-2026-41205 vulnerabilities
Vulnerabilities for packages: pgadmin4-fips, superset, airflow-core, mlflow, jupyter-base-notebook, dagster, open-webui, airflow, prefect-fips, dagster-fips, nemo...
CVE-2026-41425 vulnerabilities
Vulnerabilities for packages: pgadmin4-fips, mlflow, datahub-ingestion, datahub-ingestion-fips, open-webui, airflow...
Your Redis Server Looks Fine. That’s the Problem.
Introduction There’s an automated attack circulating right now that breaks into unprotected Redis servers, takes over the underlying machine, and then carefully puts everything back the way it found it. It restores the database filename. It deletes the tools it used. It detaches from the...
CVE-2026-43126
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Open Sound System OSS mixer component. This vulnerability arises when pending calls to kernel control operations are not properly handled during device disconnection, leading to potential Use-After-Free UAF scenarios. A...
trying-to-make-a-website-scanner
trying-to-make-a-website-scanner Web Vulnerability Scanner —...
CVE-2026-44902
creationtimestamp| type| source ---|---|--- 2026-05-06 15:40:57+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3 2026-05-27 17:02:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtye5ufzl2t...
