141837 matches found
9Router <= 0.4.36 - Unauthenticated RCE
9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...
Gradio - Open Redirect
Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...
Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal
Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above. id: CVE-2026-39352 info: name: Frappe Framework 16.15.0 - Arbitrary File...
Oracle Business Intelligence - Path Traversal
Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...
GHSA-QMCG-GF85-VJV7 vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-X9JF-Q439-HFMV vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-RRMM-9V76-H3P4
creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98676 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98676...
DEBIAN-CVE-2026-74716
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...
DEBIAN-CVE-2026-74656
In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table under RTNL, but RTNL does not serialize this walk with PMTU exception updates. The walk uses rcudereferenceprotected with a constant tr...
CVE-2026-76606
creationtimestamp| type| source ---|---|--- 2026-08-22 15:02:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amxzpg76lgeoj 2026-08-22 16:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtongfmfbz25 2026-08-22 16:07:56+00:00| seen|...
GHSA-3P69-M8GG-FWMF
creationtimestamp| type| source ---|---|--- 2026-08-22 14:51:29+00:00| seen| https://gist.github.com/sl4x0/f22a1e5c94ebe3c82b21e85010eb6e32...
DEBIAN-CVE-2026-71514
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...
CISCO-SA-20160218-GLIBC
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:22+00:00| seen| https://t.me/informationsec/693 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/693...
CISCO-SA-20160330-FP
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/850 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/850...
CVE-2016-1551
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:33+00:00| exploited| https://t.me/informationsec/975...
CISCO-SA-20161102-ESA
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:18+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...
CISCO-SA-20161026-ESAWSA3
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...
CISCO-SA-20161102-CMS
creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...