123013 matches found
CVE-2025-61584
creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...
PT-2026-86399
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...
PT-2026-86328
The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the image src attribute of the et pb video slider item shortcode in all versions up to, and including, 4.27.6. This is due to the image src field not being included in the $url options whitelist which only...
shannon v3.1.0
!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33636 DESCRIPTION: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32280 DESCRIPTION: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44432 DESCRIPTION: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44490 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33997 DESCRIPTION: Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-42945 DESCRIPTION: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...
CVE-2026-53932
creationtimestamp| type| source ---|---|--- 2026-09-04 21:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupugdptng2z 2026-09-10 05:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bflenr32p 2026-09-10 05:00:07+00:00| seen|...
CVE-2026-44506
creationtimestamp| type| source ---|---|--- 2026-09-04 20:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117214622691306928 2026-09-04 20:20:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muprz6fxze2v...
zaproxy w2026-09-03
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
CVE-2026-31020
creationtimestamp| type| source ---|---|--- 2026-09-04 19:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muponykjjc25 2026-09-04 20:08:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muprdzukii2p 2026-09-05 07:02:19+00:00| seen|...
CVE-2026-82538
creationtimestamp| type| source ---|---|--- 2026-09-04 18:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ctckeofgcwqk6 2026-09-04 23:03:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35b6kko2r 2026-09-09 18:00:04+00:00| seen|...
CVE-2026-80912
In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...
CVE-2026-61608
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...
CVE-2026-57161
PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...
CVE-2026-57163
PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...
CVE-2026-57164
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...