The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog. This allows attackers to bypass security restrictions.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of protective measures for website structures. Exploiting these vulnerabilities can allow attackers to enhance their...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

CVE-2026-73324: Out-of-bounds Read

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

GHSA-WMMP-3585-3RMP

creationtimestamp| type| source ---|---|--- 2026-09-08 23:32:32+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680

CVE-2026-47680 is a path traversal vulnerability in FluxCD source-controller (versions 0.0.17 through 1.8.4), a Kubernetes operator for artifact acquisition from Git, OCI, Helm, and S3 sources. Two attack surfaces exist: (1) an actor who can influence the contents of a Bucket-referenced bucket ca...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

EUVD-2026-74295

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-86083

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace...

Aegis aegis-v0.14.1-alpha

AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...

CVE-2026-75746

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224cxmdq2r 2026-09-09 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3kncwxmp2g 2026-10-11 00:30:26+00:00| seen|...

CVE-2026-49883

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2243bjm22w 2026-09-09 22:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2fy3k422 2026-09-15 02:37:07+00:00| seen|...

Command Injection

Overview composer/composer is a Dependency Manager for PHP. Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere. Affected versions of this package are vulnerable to Command Injection via the handling of Perforce source...

Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

GHSA-RVX4-FFVW-M9Q3 Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

CVE-2026-86464

creationtimestamp| type| source ---|---|--- 2026-09-08 21:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/epzguzddyvbho 2026-09-08 22:12:02+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv2253fi6u2y 2026-09-09 12:30:03+00:00| seen|...