122059 matches found
CVE-2026-61625 VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...
CVE-2026-61625
VictoriaMetrics vmrestore is vulnerable to a path traversal caused by insufficient validation of backup part path components in lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go. An attacker who can supply or modify a backup source (S3, GCS, Azure Blob Storage, or other) can embed ....
CVE-2026-64962
creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:05+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...
postcss: PostCSS: Information disclosure via crafted sourceMappingURL
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...
postcss: PostCSS: Information disclosure and denial of service via crafted CSS input
A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifical...
[SECURITY] Fedora 44 Update: firefox-154.0-3.fc44
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2026-39944
creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26 2026-08-20 14:53:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiqp52rr27...
CVE-2026-19385
creationtimestamp| type| source ---|---|--- 2026-08-20 14:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjg6j5euc24...
CVE-2026-66583
creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkfcfze2m 2026-08-20 14:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7f6rkp2t...
CLSA-2026-1787224839 TuxCare security update for bootstrap (7 CVEs)
TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.2-tuxcare.1...
prowler v5.35.0
Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...
WordPress ECS plugin < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability
Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source vulnerability discovered by Erwan LR WPScan in WordPress Plugin ECS – Ele Custom Skin for Elementor versions 4.3.10...
akto v2.20.1
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
arkime v6.7.0
Arkime Arkime is a large scale, open-source network analysis and packet capture system. Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP...
zaproxy w2026-08-19
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
opencode v1.18.19
The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation root@kitploit: YOLO curl -fsSL...
Rocket.Chat v8.7.1
The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...
CVE-2026-76070
creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:05+00:00| seen...
GO-2026-6112 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-synapse, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-chime, crossplane-provider-aws-organizations, crossplane-provider-aws-evidently-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-gamelift-fips,...