121623 matches found
CVE-2026-58662
creationtimestamp| type| source ---|---|--- 2026-07-25 00:08:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgl7nigny2g 2026-07-26 05:02:38+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n 2026-07-29 00:07:07+00:00| seen|...
CVE-2026-61892
creationtimestamp| type| source ---|---|--- 2026-07-25 00:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrgkqha7la22...
CVE-2026-51592
creationtimestamp| type| source ---|---|--- 2026-07-25 00:00:09+00:00| seen| Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY 2026-07-26 00:00:47+00:00| published-proof-of-concept| Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY...
SPARC: Automated Root-Cause Analysis of Pre-Silicon Power Side-Channel Leakage in the Processor Design Flow
Power-Side-Channel Leakage PSCL originates from architectural and micro-architectural artifacts in a processor and poses a severe threat to the confidentiality of cryptographic software. Consequently, pre-silicon PSCL evaluation is indispensable for secure hardware design. Existing frameworks are...
PT-2026-64616
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the FSCTL DUPLICATE EXTENTS TO FILE control code passes the source file to vfs clone file range or vfs copy file range without verifying the SMB access mask of the...
Linux Distros Unpatched Vulnerability : CVE-2026-16493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--...
CVE-2026-58023
creationtimestamp| type| source ---|---|--- 2026-07-24 23:43:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgjss4sl32u 2026-07-28 17:22:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-08-27 11:48:03+00:00| seen|...
CVE-2026-41608
creationtimestamp| type| source ---|---|--- 2026-07-24 23:32:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgj6zm2272g 2026-08-27 11:48:03+00:00| seen| https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8...
CVE-2026-48144
creationtimestamp| type| source ---|---|--- 2026-07-24 23:22:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgin3c4se24 2026-07-27 14:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pfmtd62e 2026-07-28 14:37:06+00:00| seen|...
CVE-2026-55969
creationtimestamp| type| source ---|---|--- 2026-07-24 23:17:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgie47v7k24 2026-07-28 17:22:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-07-29 01:07:08+00:00| seen|...
CVE-2026-43871
creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s 2026-08-27 11:48:03+00:00| seen|...
CVE-2021-25148
creationtimestamp| type| source ---|---|--- 2026-07-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrghraizdq2l...
GHSA-3WP3-XXJ9-5JQQ
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
GHSA-FP43-VJ7G-PG92 OmniFaces: Forged combined-resource IDs and related output/push boundaries
Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...
OmniFaces: Forged combined-resource IDs and related output/push boundaries
Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...
CVE-2026-66138
creationtimestamp| type| source ---|---|--- 2026-07-24 22:33:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgfv6yufv25...
GHSA-95CV-R8X4-VH75 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal
Summary The /api/fs/batchrename handler validates and authorizes only the requested source directory. It rejects path separators in newname, but it does not validate srcname. The handler concatenates srcdir and attacker-controlled srcname, then passes the result to the filesystem rename layer,...
CVE-2026-66039
creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...