168428 matches found
DSpace: Path Traversal is possible through LDN message generation
Overview A path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. This vulnerability impacts DSpace versions 8.0 = 8.3, 9.0 = 9.2. The attacker MUST already have DSpace administrator credentials in order to perform the attack. When reading a file input stream of an...
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices
Key Takeaways FortiBleed refers to June 2026 public reporting of large-scale credential exposure and abuse targeting internet-reachable FortiGate management and SSL-VPN gateways driven by credential reuse and brute-force, not a single new zero-day. Risk is highest for internet-exposed FortiGate...
CVE-2026-42502 affecting package keda for versions less than 2.14.1-14
CVE-2026-42502 affecting package keda for versions less than 2.14.1-14. A patched version of the package is available...
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2025-58160 affecting package kata-containers for versions less than 3.19.1.kata3-6
CVE-2025-58160 affecting package kata-containers for versions less than 3.19.1.kata3-6. A patched version of the package is available...
CVE-2026-11625 affecting package perl-Bytes-Random-Secure for versions less than 0.29-22
CVE-2026-11625 affecting package perl-Bytes-Random-Secure for versions less than 0.29-22. A patched version of the package is available...
CVE-2026-58654
The Grav API plugin getgrav/grav-plugin-api 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload endpoint /api/v1/users/user/avatar. The endpoint validates only the client-declared MIME type getClientMediaType beginning with 'image/' and does not inspect the actual file...
CVE-2026-56250
Capgo before 12.128.2 allows upload-scoped API keys to modify the mutable appversions.r2path field through PostgREST, enabling retargeting to arbitrary R2 bundle objects. Attackers can patch r2path to point to victim objects, soft-delete the attacker-controlled version, and trigger the...
CVE-2026-44840 Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, the checkUserPassword GraphQL query in Dgraph is vulnerable to DQL Dgraph Query Language injection. User-supplied password values are interpolated directly into a DQL checkpwd query via fmt.Sprintf without any escapin...
CVE-2026-54061
Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...
ROOT-APP-PYPI-CVE-2024-21520 CVE-2024-21520 in rootio-djangorestframework - Patched by Root
Root has patched CVE-2024-21520 in the rootio-djangorestframework package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-57820 CVE-2025-57820 in @rootio/devalue - Patched by Root
Root has patched CVE-2025-57820 in the @rootio/devalue package for Root:npm. Multiple fixed versions available...
Exploit for Cross-site Scripting in Combodo Itop
CVE-2023-36664: Ghostscript Remote Code Execution 취약점 요약...
RHSA-2026:36617 Red Hat Security Advisory: oci-seccomp-bpf-hook security update
Bulletin has no description...
RHSA-2026:36531 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, and kpatch-patch-4_18_0-477_97_1 security update
Bulletin has no description...
RHSA-2026:36532 Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update
Bulletin has no description...
RHSA-2026:36530 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
Bulletin has no description...
RHSA-2026:36172 Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
Bulletin has no description...