122355 matches found
GHSA-CH52-PX8Q-F22J
creationtimestamp| type| source ---|---|--- 2026-08-05 07:31:31+00:00| seen| https://gist.github.com/alon710/e46f39ae43e3fffa5ce1183a133d472c...
CVE-2026-53945
creationtimestamp| type| source ---|---|--- 2026-08-05 07:31:31+00:00| seen| https://gist.github.com/alon710/e46f39ae43e3fffa5ce1183a133d472c...
CVE-2026-17532
creationtimestamp| type| source ---|---|--- 2026-08-05 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96706 2026-08-05 10:00:05+00:00| published-proof-of-concept| Telegram/Nl8mRngxmNEif6AAKsIvUzhnsF325qswadlkhxgWlmwB0s 2026-08-05 21:00:04+00:00| seen|...
CVE-2026-71202
The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...
EUVD-2026-53199
The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...
CVE-2026-5062
creationtimestamp| type| source ---|---|--- 2026-08-05 06:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp 2026-08-06 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23...
GHSA-G366-23FW-GGP6
creationtimestamp| type| source ---|---|--- 2026-08-05 06:32:52+00:00| seen| https://gist.github.com/alon710/12c62bdb45c24ef118204a5bc7818a85...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2020-5895
creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:08+00:00| seen| https://t.me/timcorehacking/882 2026-08-06 00:00:51+00:00| exploited| https://t.me/timcorehacking/882...
GHSA-JM22-3W23-5Q7W
creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...
CVE-2026-70590
creationtimestamp| type| source ---|---|--- 2026-08-05 05:32:02+00:00| seen| https://gist.github.com/alon710/0b530d759c455a262a40add3fda52d22...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
OpenStack Swift (through 2.38.0) is affected by a vulnerability in the S3API middleware where presigned URL requests do not ensure that semantic x-amz-* headers are covered by the SigV4 signature. An attacker with a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, triggering a s...
EUVD-2026-53049
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2019-12874
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/516 2026-08-06 00:00:48+00:00| seen| https://t.me/timcorehacking/516...
CVE-2019-1290
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/604 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/604 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen|...