261993 matches found
CVE-2024-39024
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:20+00:00| seen| Telegram/ZLovNjLGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg 2026-07-17 00:00:36+00:00| seen| Telegram/ZLovNjLGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg 2026-07-18 00:00:23+00:00| published-proof-of-concept|...
CVE-2023-22496
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:20+00:00| seen| Telegram/ANdWwAFkpLQfM-X2aYZEZtkv6KeIQ1otZUE6tWGKBHzleA 2026-07-17 00:00:36+00:00| seen| Telegram/ANdWwAFkpLQfM-X2aYZEZtkv6KeIQ1otZUE6tWGKBHzleA 2026-07-18 00:00:24+00:00| published-proof-of-concept|...
CVE-2026-51788
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:16+00:00| seen| Telegram/8xuhxObjAFcuRvwDX0OGu8n65FVPMNoWE2rdDkez26ISk4 2026-07-17 00:00:32+00:00| seen| Telegram/8xuhxObjAFcuRvwDX0OGu8n65FVPMNoWE2rdDkez26ISk4 2026-07-18 00:00:33+00:00| published-proof-of-concept|...
CVE-2026-50979
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:13+00:00| seen| Telegram/t092y5BgJmODHc3D2a3Ra4fTCXsa-vHp4gQ4JjPUYAbfUJ0 2026-07-16 19:00:13+00:00| seen| Telegram/c-tiQItlsunczDQWBYAXRvkiYxV7bIvmHKFdwaGGudIBj1Y 2026-07-17 00:00:29+00:00| seen|...
EUVD-2026-45028
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...
CVE-2026-26718
creationtimestamp| type| source ---|---|--- 2026-07-16 18:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvoapjwx2w 2026-07-16 19:00:06+00:00| seen| Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tqHAdHjPuF4Jq-SaqH-76iI 2026-07-17 00:00:10+00:00| published-proof-of-concept|...
CVE-2026-46338 PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when restrictbasepath: True, allowing markdown snippet directives t...
CVE-2026-44968
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...
CVE-2026-15737
AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...
CVE-2026-13401
creationtimestamp| type| source ---|---|--- 2026-07-16 18:09:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqrtfkoup52p...
CVE-2026-57074
creationtimestamp| type| source ---|---|--- 2026-07-16 18:04:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqrt4le6bw25 2026-07-17 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqul65ilha2y 2026-07-18 09:28:03+00:00| seen|...
SUSE CVE-2026-45793
Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration validates GitHub OAuth tokens with the regex ^.A-Za-z0-9+$ and interpolates rejected tokens into an UnexpectedValueException; GitHub Actions GITHUBTOKEN values using t...
CVE-2026-44970 dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction
dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emittoolcalledevent in src/dbtmcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabsvortex.producer.logproto without redaction,...
CVE-2026-45576
zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, zrok2 copy stores attacker-controlled WebDAV or zrok drive paths such as /../outside.txt in the source inventory and passes them to FilesystemTarget.WriteStream, allowing the sync pipeline to write...
CVE-2026-13401
XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parsercparse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as "" or unbalanced quotes "" can...
CVE-2026-46341
The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.9.21, the fetch-apify-docs tool in src/tools/common/fetchapifydocs.ts validates allowlisted documentation domains with...
CVE-2026-59862
creationtimestamp| type| source ---|---|--- 2026-07-16 16:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrofozyab2n...
CVE-2026-59859
creationtimestamp| type| source ---|---|--- 2026-07-16 16:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrnktbz6e22...