262229 matches found
EUVD-2026-42331
Mistune: XSS via percent-encoded javascript URI bypass in safeurl...
EUVD-2026-42302
js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml...
EUVD-2026-42301
js-yaml: YAML merge-key chains can force quadratic CPU consumption...
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference IDOR vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker can manipulate the 'remark' request parameter to enumerate, retrieve, and delete files belonging to other users on the application server...
CVE-2026-12341
creationtimestamp| type| source ---|---|--- 2026-07-20 20:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr46li4f7w2g...
CVE-2026-63767
creationtimestamp| type| source ---|---|--- 2026-07-20 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr46ajg2e22s 2026-07-20 23:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fltadqn2u 2026-07-21 12:14:08+00:00| seen|...
CVE-2025-40945
creationtimestamp| type| source ---|---|--- 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr4564uojn2r 2026-07-20 20:30:50+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mr4564mkvd2s...
CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows
Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...
CVE-2026-58624 Apache MINA SSHD: Remote execution of JGit commands can write files on the server
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...
CVE-2026-58624 Apache MINA SSHD: Remote execution of JGit commands can write files on the server
Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...
DEBIAN-CVE-2026-44230
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm4: helm4-4.2.3-0.1.2.hum1 aarch64, x8664 helm4-4.2.3-0.1.2.hum1.src src Security Fixes: helm4: CVE-2026-63308...
CVE-2026-63731
creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23 2026-07-21 05:00:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j 2026-07-21 05:00:47+00:00| seen|...
CVE-2026-44584
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...
CVE-2026-44584
Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...
CVE-2026-44584 Paymenter doesn't reset email verification status after email change
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...
CVE-2026-53593
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads Helper::$restrictedextensions is incomplete: it does not cover the .pht extension. The authenticated upload endpoint POST /uploads/uplo...
CVE-2026-50743
creationtimestamp| type| source ---|---|--- 2026-07-20 19:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3zaum4cl2q...
DEBIAN-CVE-2026-64194
Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack at least with...