117855 matches found
GHSA-56WQ-X3WV-3FF4 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
Summary The SeaweedFS S3 API gateway did not reject .. path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy. The request URL path was hardened against traversal in 4.30 CVE-2026-54917, but the copy-source header was only checked for emptiness, so a .. segment in the...
CVE-2026-55378
creationtimestamp| type| source ---|---|--- 2026-08-28 22:08:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6es5gpzu25 2026-08-29 18:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muahfhddky2c...
CVE-2026-82291
creationtimestamp| type| source ---|---|--- 2026-08-28 22:02:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6eihl22427...
CVE-2026-82286
creationtimestamp| type| source ---|---|--- 2026-08-28 22:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6efw67we22 2026-08-29 07:00:04+00:00| seen| https://t.me/GithubRedTeam/100174 2026-08-29 23:00:07+00:00| seen|...
GHSA-V358-WF77-39XV klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits
Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...
CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...
CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...
CVE-2026-82333
creationtimestamp| type| source ---|---|--- 2026-08-28 20:16:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mu66kfqf3k2k 2026-08-29 00:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l56jzev22 2026-08-29 00:33:51+00:00| seen|...
aiagent-detection-rules
aiagent-detection-rules Sigma-, Splunk-, Elastic- und YARA-Erkennungsregeln für den Claude-Code-Quellcode-Leak 31. März 2026 und den gleichzeitigen npm-Lieferkettenangriff. Am 31. März 2026 hat Anthropic versehentlich eine fehlkonfigurierte Source-Map in @anthropic-ai/[email protected]...
CVE-2026-56854
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
UBUNTU-CVE-2026-56854
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
CVE-2026-56854
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
CVE-2026-56854
A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. This oversight could allow a remote attacker to bypass intended network-based access control...
CVE-2026-56854 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
CVE-2026-56854
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
CVE-2026-56854 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
EUVD-2026-67741
The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...
CVE-2026-56854
CVE-2026-56854 affects golang.org/x/crypto/ssh . The source-address critical option in Permissions returned by authentication callbacks was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths (extending a prior fix for CVE-2026-46595). Callbacks for PasswordCallback , Keyb...
CVE-2026-72846
creationtimestamp| type| source ---|---|--- 2026-08-28 15:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3417 2026-08-29 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3417...
Incorrect Authorization
Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Incorrect Authorization in NewServerConn, which applied the critical option from the Permissions returned by an authentication callback only on the PublicKeyCallback and...