119743 matches found
PT-2026-64616
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the FSCTL DUPLICATE EXTENTS TO FILE control code passes the source file to vfs clone file range or vfs copy file range without verifying the SMB access mask of the...
Linux Distros Unpatched Vulnerability : CVE-2026-16493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--...
CVE-2026-58023
creationtimestamp| type| source ---|---|--- 2026-07-24 23:43:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgjss4sl32u 2026-07-28 17:22:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-08-27 11:48:03+00:00| seen|...
CVE-2026-41608
creationtimestamp| type| source ---|---|--- 2026-07-24 23:32:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgj6zm2272g 2026-08-27 11:48:03+00:00| seen| https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8...
CVE-2026-48144
creationtimestamp| type| source ---|---|--- 2026-07-24 23:22:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgin3c4se24 2026-07-27 14:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pfmtd62e 2026-07-28 14:37:06+00:00| seen|...
CVE-2026-55969
creationtimestamp| type| source ---|---|--- 2026-07-24 23:17:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgie47v7k24 2026-07-28 17:22:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-07-29 01:07:08+00:00| seen|...
CVE-2026-43871
creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s 2026-08-27 11:48:03+00:00| seen|...
CVE-2021-25148
creationtimestamp| type| source ---|---|--- 2026-07-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrghraizdq2l...
GHSA-3WP3-XXJ9-5JQQ
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
OmniFaces: Forged combined-resource IDs and related output/push boundaries
Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...
GHSA-FP43-VJ7G-PG92 OmniFaces: Forged combined-resource IDs and related output/push boundaries
Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...
CVE-2026-66138
creationtimestamp| type| source ---|---|--- 2026-07-24 22:33:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgfv6yufv25...
GHSA-95CV-R8X4-VH75 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal
Summary The /api/fs/batchrename handler validates and authorizes only the requested source directory. It rejects path separators in newname, but it does not validate srcname. The handler concatenates srcdir and attacker-controlled srcname, then passes the result to the filesystem rename layer,...
CVE-2026-66039
creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...
CVE-2026-66040
creationtimestamp| type| source ---|---|--- 2026-07-24 22:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge27kuf62d...
CVE-2021-22439
creationtimestamp| type| source ---|---|--- 2026-07-24 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrgcqctujh2c...
CVE-2026-62379
creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-07-31 13:41:33+00:00| seen|...
CVE-2026-62263
creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkotfvw2y 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-09-15 12:07:47+00:00| seen|...