1440884 matches found
OPENSUSE-SU-2026:21653-1 Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.53.0 Add X-Forwarded-For support to gRPC transport Add Stream based Packet Addr for UDP Connections rrpit: compact session, async send, session recovery Add socks5ify engineering command Fix bugs...
CVE-2026-55640
creationtimestamp| type| source ---|---|--- 2026-08-25 18:08:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfys2tk52p 2026-08-25 18:35:19+00:00| published-proof-of-concept| https://github.com/cbcoutinho/nextcloud-mcp-server/security/advisories/GHSA-8vh3-g2qg-2h2c 2026-08-2...
RLSA-2026:59490 Important: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...
UBUNTU-CVE-2026-59189
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel::row API can return an out-of-bounds pointer when a deep imag...
ROOT-OS-DEBIAN-12-CVE-2026-15308 CVE-2026-15308 in python3.11 - Patched by Root
Root has patched CVE-2026-15308 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3.11 - Patched by Root
Root has patched CVE-2026-3644 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-55534
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7ww9-85pg-cv4x...
CVE-2026-55540
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:37+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-ch89-h4r2-c8f8 2026-08-25 18:13:47+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtwgc6uuyp2g 2026-08-25...
CVE-2026-55539
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:21+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-2jgc-f764-c5r2...
CVE-2026-55536
creationtimestamp| type| source ---|---|--- 2026-08-25 16:35:14+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6g6r-q6gw-w8fg 2026-08-25 18:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfybfgai2b 2026-08-25...
EUVD-2026-42395
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...
CLSA-2026-1787675020 TuxCare security update for 30 packages (3 CVEs)
TuxCare rebuilt 30 packages to address 3 CVEs. Fixed in 7.0.70-tuxcare.1...
CVE-2026-55546
creationtimestamp| type| source ---|---|--- 2026-08-25 16:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kkjtwu7rva4w 2026-08-25 16:35:12+00:00| published-proof-of-concept| https://github.com/QWED-AI/qwed-mcp/security/advisories/GHSA-mw6r-2hvm-4rp2 2026-08-25 18:08:22+00:00|...
DEBIAN-CVE-2026-79781
rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...
DEBIAN-CVE-2026-79772
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
UBUNTU-CVE-2026-79782
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...
CVE-2026-79775
rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...
CVE-2026-79782
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...
CVE-2026-55580
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...