123174 matches found
CVE-2026-56086
creationtimestamp| type| source ---|---|--- 2026-07-08 14:44:01+00:00| seen| https://bsky.app/profile/suriq.io/post/3mq5e6qdzn72d 2026-07-09 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq7f6or2nd2m...
CVE-2026-55874
SeaweedFS's S3 API gateway is affected prior to version 4.34 by a path traversal issue in the X-Amz-Copy-Source header (dot-dot segments) that can enable an authenticated user scoped to one bucket to read objects from other buckets via server-side copy. The issue is documented across CVE-2026-558...
CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...
CVE-2026-55874
SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...
CVE-2026-55874
SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...
CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...
CVE-2026-55874 SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...
CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover
Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...
CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover
Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...
GHSA-HWMJ-QG4V-CVG9
creationtimestamp| type| source ---|---|--- 2026-07-08 14:41:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq5e2piu2p26...
CVE-2019-10663
creationtimestamp| type| source ---|---|--- 2026-07-08 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5dskju6a2g...
CVE-2026-6459
creationtimestamp| type| source ---|---|--- 2026-07-08 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq5cmzz3zi26...
CVE-2024-00001
creationtimestamp| type| source ---|---|--- 2026-07-08 14:03:59+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq5bxdedta2g 2026-07-10 04:27:21+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqbco2xkwm2p 2026-07-28 15:34:40+00:00| seen|...
kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite
A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT Source Network Address Translation module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP Address Resolution...
CVE-2026-15035
Bentoml OpenLLM 0.6.30 is affected by a command-injection in async_run_command (src/openllm/common.py, Model Repository Directory Name Handler). The vulnerability stems from manipulation of the cmd argument, enabling local exploitation. Public exploit details exist, and attack requires local acce...
CVE-2026-56293
Capgo before 12.128.2 contains an authorization flaw in transferapp that fails to update deployhistory.ownerorg when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause...
EUVD-2026-42254
Capgo before 12.128.2 contains an authorization flaw in transferapp that fails to update deployhistory.ownerorg when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause...
MINI-5686-GJR7-PQG2
Bulletin has no description...
CVE-2026-6818
creationtimestamp| type| source ---|---|--- 2026-07-08 13:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq57bpuwyo2p...
CVE-2026-8307
creationtimestamp| type| source ---|---|--- 2026-07-08 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq56wwdaak2d 2026-07-08 13:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq57vsdkv525...