1440884 matches found
CVE-2026-54874
creationtimestamp| type| source ---|---|--- 2026-08-25 16:02:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtw6xhzfnb2r 2026-08-25 16:27:45+00:00| seen| https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23 2026-08-26 01:09:35+00:00| seen|...
CVE-2026-19632
creationtimestamp| type| source ---|---|--- 2026-08-25 15:43:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtw5vf2mug27 2026-08-26 04:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/flspxxfkgtf7q 2026-08-26 10:00:31+00:00| seen|...
CVE-2026-55580 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...
CVE-2026-55580 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...
CVE-2026-55580
mcp-shell is an MCP server for running shell commands. Prior to 0.6.0 , config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC_CONFIG_FILE is unset, the documented bare-binary deployment starts without a security policy. SecurityValidator.validateCommand in security.go then short...
CLSA-2026-1787672438 TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 47 io.netty packages to address 6 CVEs. Fixed in 4.1.130.Final-tuxcare.4...
CVE-2026-55581
mcp-shell is an MCP server for running shell commands securely. Prior to 0.6.0 , the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell -c flag. A caller of the shel...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.6 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
CVE-2026-79782
rclone before version 1.74.4 does not strip the X-Amz-Security-Token header when an S3 redirect changes the scheme from HTTPS to HTTP on the same host. An attacker positioned to intercept the resulting plaintext HTTP traffic can capture AWS STS session tokens transmitted in request headers, poten...
CVE-2026-79782 rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...
ROOT-OS-DEBIAN-12-CVE-2026-7010 CVE-2026-7010 in perl - Patched by Root
Root has patched CVE-2026-7010 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-31486 CVE-2023-31486 in perl - Patched by Root
Root has patched CVE-2023-31486 in the perl package for Root:Debian:12. Multiple fixed versions available...
EUVD-2026-53606
praisonaiagents vulnerable to SSRF in webcrawl tool via redirect-following and DNS rebinding validate-then-fetch gap...
CLSA-2026-1787668954 TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 46 io.netty packages to address 8 CVEs. Fixed in 4.1.79.Final-tuxcare.1...
MINI-RFWQ-7MXV-XJ2F
Bulletin has no description...
MINI-4X32-R6VF-X7M7
Bulletin has no description...
MINI-6WVC-G5MQ-MM56
Bulletin has no description...
MINI-64PF-R5WH-MVFP
Bulletin has no description...