122070 matches found
PT-2026-71635
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A symlink race condition exists in the sender's source tree traversal. An attacker capable of manipulating a parent directory of the source tree can redirect file reads to unintended paths. This is...
PT-2026-71638
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A symlink race condition exists in the --remove-source-files feature. This occurs when an attacker with symlink creation access atomically substitutes a symlink for a source file between the completion...
CVE-2026-73488: Authorization Bypass Through User-Controlled Key
Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...
CVE-2026-53797: Improper Link Resolution Before File Access
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with ...
CVE-2026-53800: Improper Link Resolution Before File Access
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...
Linux Distros Unpatched Vulnerability : CVE-2026-19587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. CVE-2026-19587 Note that Nessus relies on the presen...
CVE-2026-72795
creationtimestamp| type| source ---|---|--- 2026-08-12 22:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw5ylszbj2p 2026-09-04 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h6w7-xxcf-w2mq 2026-09-05 06:34:06+00:00| seen|...
CVE-2026-59539
creationtimestamp| type| source ---|---|--- 2026-08-12 21:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msw2gcpaiv2m...
CVE-2026-19003
MongoDB BI Connector ODBC Driver vulnerability (CVE-2026-19003) affects the driver’s setup dialog for data sources with overly long path settings. The root cause is an incorrect buffer capacity calculation in the dialog’s file/folder selection handling, which can cause the driver to write outside...
EmailXpose — Updated!
EmailXpose AI-Powered Email Clarity EmailXpose is an open source AI system that analyzes emails to detect phishing, spam, scams, and malware while also interpreting contextual meaning across text, images, and video. It goes beyond traditional security tools by combining threat intelligence,...
GHSA-WP74-JGXH-GV4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-69223
creationtimestamp| type| source ---|---|--- 2026-08-12 20:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvwq5x3bl2u 2026-08-18 04:50:09+00:00| seen| https://jvn.jp/en/jp/JVN06609828...
CVE-2026-18952
creationtimestamp| type| source ---|---|--- 2026-08-12 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvw76city2l 2026-08-13 19:35:56+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msyfc2d2x62k...
postcss: PostCSS: Information disclosure via crafted sourceMappingURL
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...
CVE-2026-0297
creationtimestamp| type| source ---|---|--- 2026-08-12 19:03:27+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3msvsz2avkd2y 2026-08-14 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities20260814 2026-09-12 03:03:19+00:00| seen...
CVE-2026-18952
Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.
CVE-2026-73294
creationtimestamp| type| source ---|---|--- 2026-08-12 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm73rpzr2h 2026-08-12 17:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvna6ouz72q 2026-08-15 09:40:03+00:00| seen|...
CVE-2026-65941
creationtimestamp| type| source ---|---|--- 2026-08-12 16:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jw4cxurkd5kfr 2026-08-12 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm7joobz2y...