1442877 matches found
GHSA-VVXF-F8Q9-86GH
creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:11+00:00| seen| https://t.me/hackingAttack/184244 2026-09-02 01:00:27+00:00| seen| https://t.me/hackingAttack/184244 2026-09-03 00:00:36+00:00| published-proof-of-concept| https://t.me/hackingAttack/184244...
CVE-2026-4931
creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:11+00:00| seen| https://t.me/hackingAttack/183054 2026-09-01 20:00:11+00:00| seen| https://t.me/hackingAttack/183052 2026-09-02 01:00:28+00:00| seen| https://t.me/hackingAttack/183052 2026-09-02 01:00:28+00:00| seen|...
GHSA-9969-8G9H-RXWM
creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:06+00:00| seen| https://t.me/hackingAttack/189047 2026-09-02 01:00:24+00:00| published-proof-of-concept| https://t.me/hackingAttack/189047...
MemShellParty v2.10.0
MemShellParty 中文 | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...
EUVD-2026-69566
Incorrect Authorization CWE-863 in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only read-level Security feature access, and no Elasticsearch privileges, could stop the recurri...
EUVD-2026-69565
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store...
DEBIAN-CVE-2026-84305
sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...
DEBIAN-CVE-2026-84303
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...
vet v1.19.0
Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...
CGA-669W-MH6H-FVFX
Bulletin has no description...
CVE-2026-73089
creationtimestamp| type| source ---|---|--- 2026-09-01 18:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c83g-rgw3-j3cx 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen|...
CLSA-2026-1788287051 TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2...
DEBIAN-CVE-2026-52023
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...
github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass
A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...
ROOT-APP-NPM-CVE-2026-44494 CVE-2026-44494 in axios - Patched by Root
Root has patched CVE-2026-44494 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in axios - Patched by Root
Root has patched CVE-2026-42043 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-62718 CVE-2025-62718 in axios - Patched by Root
Root has patched CVE-2025-62718 in the axios package for Root:npm. Multiple fixed versions available...