10001 matches found
CVE-2026-105820
The Vault ACL policy cache is vulnerable to a path traversal flaw (CWE-22) when policy names contain specific traversal constructs. This allows a token with a specially crafted policy name to bypass namespace boundaries and utilize the capabilities of policies defined in other namespaces, includi...
Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
Summary Vault’s ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
Summary When remote fetching is enabled enableremotefetch=True, together with fetchimages=True or HTML renderpage=True, docling's protection against requests to private and loopback addresses can be bypassed. - The URL check resolves the host name once, to a single IPv4 address. The HTTP request...
EUVD-2026-91671
Next.js has Server-Side Request Forgery in Image Optimization...
Security Bulletin:jackson-databind Deserialization Eager DNS Resolution Vulnerability
Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...
GHSA-C3WX-C55W-PXJQ Hydra logging configuration permits unsafe callable resolution
Summary Hydra passed its Python logging configuration to logging.config.dictConfig. Python's logging configurator can resolve and invoke importable classes and factories named by configuration, including handler class values and formatter, filter, handler, queue, and listener factories. This...
Hydra logging configuration permits unsafe callable resolution
Summary Hydra passed its Python logging configuration to logging.config.dictConfig. Python's logging configurator can resolve and invoke importable classes and factories named by configuration, including handler class values and formatter, filter, handler, queue, and listener factories. This...
EUVD-2026-94007
Backstage: Improper authentication in the OIDC provider...
EUVD-2026-94056
Backstage: Improper URL validation in catalog entity placeholder resolution...
dscanner
dScanner 🔍 Herramienta automatizada de reconocimiento web para auditorías de seguridad Descripción dScanner consolida múltiples herramientas de reconocimiento en un solo comando para la fase inicial de pentesting web. Solo usar con sistemas autorizados!!!! 🚀 Instalación Dependencias requeridas:...
CVE-2026-106279
An incorrect reference resolution flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513757840...
CVE-2026-106274
Incorrect reference resolution in Browser in Google Chrome on on Mac p...
Linux Distros Unpatched Vulnerability : CVE-2026-106274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain...
Linux Distros Unpatched Vulnerability : CVE-2026-106308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obta...
CVE-2026-106181
Incorrect reference resolution in DevTools in Google Chrome prior to 1...
CVE-2026-106308
Incorrect reference resolution in Autofill in Google Chrome on on Andr...
CVE-2026-106230
Incorrect reference resolution in Offline in Google Chrome on on Andro...
CVE-2026-106279
Incorrect reference resolution in Passwords in Google Chrome on on iOS...