3457 matches found
CVE-2026-9605
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bitreadRC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be...
CVE-2026-9572
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function MediaGetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of the argument cat leads to memory leak. The attack can only be performed from a local environment. Th...
CVE-2026-9504 GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds
A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bitconvertTU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public...
Exploit for CVE-2026-0926
No d...
CVE-2026-28445
Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the RatingButton component in the embed package renders the user-controlled customIcon.svg field directly via Solid's innerHTML directive without any sanitization, even though DOMPurify is already a dependency and is used elsewhere ...
CVE-2026-5740
creationtimestamp| type| source ---|---|--- 2026-05-22 12:45:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxnwxwvc2p...
Malicious code in @thebros/create-benjamin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb816939bb505cdabc374418983428298b09a29e5789033943301642b8b156 The package tarball ships a .env file containing a live-looking OpenAI API key OPENAIAPIKEY=sk-proj-.... The CLI entry point bin/index.js calls impor...
Malicious code in acc-document-editing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c82ee7b879d66ba2fb79ec7ad7fee47623c2c3b68c8a925510b1f42cd1e3456 The DocumentEditor React component exported by this package, when an end-user opens a.doc file, POSTs the raw file bytes to...
CVE-2025-68110
creationtimestamp| type| source ---|---|--- 2026-05-21 18:06:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmez427w3f2u...
RHSA-2026:19711 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
PT-2026-42592
Content removed...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iouring: A memory leak was fixed when removing provided buffers. When removing provided buffers, the iobuffer structures were not being disposed of properly, resulting in a memory leak. These structures cannot be freed...
CVE-2026-45442
creationtimestamp| type| source ---|---|--- 2026-05-19 12:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7g4qleda2r 2026-05-23 10:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmjao5fv6t2h...
CVE-2026-6478
creationtimestamp| type| source ---|---|--- 2026-05-18 09:02:04+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mm4j4wewdng2 2026-06-05 14:33:15+00:00| seen| https://bsky.app/profile/pgexperts.bsky.social/post/3mnke6ysiwm2c 2026-06-23 19:16:28+00:00| seen...
CVE-2026-44171
Disclaimer: This data contains information about vulnerable...
CVE-2026-6913
creationtimestamp| type| source ---|---|--- 2026-05-16 20:34:02+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlyowkdwxe2s...
CVE-2026-0481
creationtimestamp| type| source ---|---|--- 2026-05-15 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mluiq5544h22 2026-05-15 04:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116576710004603324...