CVE-2026-19884

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applications built on Theia that include the git integration, such as the Theia IDE. Both Theia's own @theia/git extension an...

CVE-2026-19884

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applications built on Theia that include the git integration, such as the Theia IDE. Both Theia's own @theia/git extension an...

CVE-2026-73621

A flaw was found in GitPython. An argument injection vulnerability in the Commit.count method allows an attacker to control options passed to the method. By supplying a crafted output option, an attacker can cause the git rev-list command to truncate an arbitrary file to zero bytes. This enables...

CVE-2026-73623

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

CVE-2026-73624

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the Diffable.diff method, an attacker can supply a malicious output argument to write patch content to attacker-controlled...

CVE-2026-73622

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted...

CVE-2026-73625

A flaw was found in GitPython. Attackers can bypass the checkunsafeoptions guard by smuggling git options within single-character keyword argument kwarg values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as clonefrom or fetch, leading to...

CVE-2026-73620

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2026-53365 Donate Support the maintenance of this pro...

privil_edge

priviledge !CIhttps://github.com/Ianemwel679/priviledge...

Exploit for Improper Authorization in Microsoft

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos E...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: nri-f5, envoy-ai-gateway, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, steampipe, crossplane-function-environment-configs, octo-sts, harbor-registry, spark-operator-fips, ghaudit,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: nri-f5, envoy-ai-gateway, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, steampipe, crossplane-function-environment-configs, octo-sts, harbor-registry, spark-operator-fips, ghaudit,...

ejpt-mission-framework-poc

eJPT Mission Framework An evidence-backed Markdown workflow f...

VulnScope

VulnScope POC Proof of Concept Vulnerability Verificati...

kubeshark v53.4.0

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: beats-fips, nri-f5, container-object-storage-interface, datadog-agent-fips, gatekeeper-fips, traefik, wireguard-go, longhorn-engine, tetragon, fuse-overlayfs-snapshotter, influx, knative-kafka-broker, net-kourier-fips, tailscale, vgpu-util, envoy-gateway,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: beats-fips, nri-f5, container-object-storage-interface, datadog-agent-fips, gatekeeper-fips, traefik, wireguard-go, longhorn-engine, tetragon, fuse-overlayfs-snapshotter, influx, knative-kafka-broker, net-kourier-fips, tailscale, vgpu-util, envoy-gateway,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, trivy-fips, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...