29836 matches found
Linux RxRPC DoS
The vulnerability in the rxrpcserverkeyring function within the net/rxrpc/serverkey.c module, which handles RxRPC session sockets on Linux operating systems, is related to errors occurring during reference count updates. Exploitation of this vulnerability may allow an attacker to cause a denial o...
CVE-2026-67435
creationtimestamp| type| source ---|---|--- 2026-07-29 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstx5hkw522 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...
CVE-2026-13306
Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The...
CVE-2025-60931
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
CGA-H625-7CF3-469M
Bulletin has no description...
CVE-2026-64301
A flaw was found in the Linux kernel's regulator subsystem. An issue in the scmiregulatorprobe function can lead to a reference count leak. This occurs when an error path is triggered during device node processing, causing a resource to not be properly released. Over time, this unreleased resourc...
CVE-2026-58336
A flaw was found in Moodle. This vulnerability, an Insecure Direct Object Reference IDOR, allows an authenticated user with comment deletion permissions to delete comments they are not authorized to remove. This means a user could potentially delete any comment on the platform, leading to...
NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
CVE-2026-54663 swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http or https target without private IP,...
CVE-2026-54663
swagger-typescript-api before v13.12.2 allows SSRF during code generation via warmUpRemoteSchemasCache: external $ref URLs are fetched with no private IP, DNS rebinding, redirect, or same-origin checks, enabling attacker-controlled OpenAPI specs to trigger requests to internal or link-local servi...
EUVD-2026-50364
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http or https target without private IP,...
CVE-2026-54663 swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchemasCache resolves external $ref URLs and fetchRemoteSchemaDocument uses isHttpUrl to fetch any http or https target without private IP,...
NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...
CVE-2026-54660 swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRemoteSchemasCache resolves external $r...
CVE-2026-54660 swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRemoteSchemasCache resolves external $r...
EUVD-2026-50361
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRemoteSchemasCache resolves external $r...
CVE-2026-54660
swagger-typescript-api prior to 13.12.2 forwards the Authorization token to every external $ref request during openapi schema resolution, enabling token exfiltration to attacker-controlled endpoints. The root cause is getRemoteRequestHeaders attaching the token to all fetchRemoteSchemaDocument ca...
MINI-45PR-JQG9-MJVX
Bulletin has no description...