20911 matches found
CVE-2026-43891
creationtimestamp| type| source ---|---|--- 2026-04-27 06:34:50+00:00| published-proof-of-concept| https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-8757-69j2-hx56...
CVE-2026-42045
creationtimestamp| type| source ---|---|--- 2026-04-27 05:24:20+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-xq4x-622m-q8fq...
📄 textract 2.5.0 Command Injection
In textract version 2.5.0, a security vulnerability allows OS command injection when untrusted file paths are processed by the library. ================================================================================================================================== | Title : textract 2.5.0 OS...
CVE-2026-42314
creationtimestamp| type| source ---|---|--- 2026-04-26 21:37:37+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-97r3-5w84-r4q8...
CVE-2026-43983
creationtimestamp| type| source ---|---|--- 2026-04-26 17:45:52+00:00| published-proof-of-concept| https://github.com/pocket-id/pocket-id/security/advisories/GHSA-w6p7-2fxx-4f44 2026-07-28 16:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6p7-2fxx-4f44...
CVE-2026-42260
creationtimestamp| type| source ---|---|--- 2026-04-26 13:21:40+00:00| published-proof-of-concept| https://github.com/Aas-ee/open-webSearch/security/advisories/GHSA-v228-72c7-fx8j...
EUVD-2018-21791
Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exception handler SEH overwrite. Attackers can craft a malicious payload and paste it into the Device alias field within the Managing Log...
CVE-2026-43929
creationtimestamp| type| source ---|---|--- 2026-04-26 01:30:34+00:00| published-proof-of-concept| https://github.com/felippe-regazio/ssrfcheck/security/advisories/GHSA-j4rj-2jr5-m439...
CVE-2026-43901
creationtimestamp| type| source ---|---|--- 2026-04-25 13:59:39+00:00| published-proof-of-concept| https://github.com/bx33661/Wireshark-MCP/security/advisories/GHSA-3r68-x3xc-rxpg...
CVE-2026-42188
creationtimestamp| type| source ---|---|--- 2026-04-25 13:31:02+00:00| published-proof-of-concept| https://github.com/GeyserMC/Geyser/security/advisories/GHSA-xcfg-fcr5-gw9r...
CVE-2026-42554
creationtimestamp| type| source ---|---|--- 2026-04-25 13:08:32+00:00| published-proof-of-concept| https://github.com/gofiber/fiber/security/advisories/GHSA-qjv7-627w-8qjv...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-417...
CVE-2026-43878
creationtimestamp| type| source ---|---|--- 2026-04-25 01:13:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mm5f-8q57-4fc4...
CVE-2026-43877
creationtimestamp| type| source ---|---|--- 2026-04-25 01:06:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-jw8g-5j46-44rp...
CVE-2026-43876
creationtimestamp| type| source ---|---|--- 2026-04-25 00:57:12+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-g9cm-rxp7-6gv5...
CVE-2026-43875
creationtimestamp| type| source ---|---|--- 2026-04-25 00:54:22+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-5w8w-26ch-v5cw...
CVE-2026-43874
creationtimestamp| type| source ---|---|--- 2026-04-25 00:50:46+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-ghcv-22jf-vfxm...
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary In the auto-remediation pipeline, objecttoexecution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the...