cveye

C V E y e Zero-dependency CLI for CVE details & expl...

CVE-2026-75593

Prior to BuildKit 0.31.2, a client with control API access can craft an upload request causing files to escape the BuildKit state directory, enabling directory traversal. Fixed in v0.31.2. No exploitation details provided; CVSS 7.2 HIGH (network, low complexity, low privileges required).

CVE-2026-75626

SpiderFoot fails to HTML-escape correlation titles built from external scan data (server banners, metadata), allowing stored XSS: attackers inject malicious HTML/event handlers that execute scripts in operators' browsers when the correlations view is opened, potentially stealing API keys. No patc...

CVE-2026-19496

A flaw was found in sources-api-go. An authenticated remote user can exploit a SQL injection vulnerability by injecting arbitrary SQL expressions through query parameter filtering. This can lead to unauthorized information disclosure of internal database fields, arbitrary PostgreSQL function...

CVE-2026-68116

CVE-2026-68116 affects the Linux kernel VXLAN MDB replacement path. When replacing the source list of an MDB remote entry, the old sources are marked for deletion and the new list is added; if vxlan_mdb_remote_srcs_add() fails partway, the original rollback could delete pre-existing sources along...

CVE-2026-66915

creationtimestamp| type| source ---|---|--- 2026-08-10 10:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspvpwstsn2n 2026-08-10 10:53:53+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mspwps54m32i 2026-08-11 09:04:48+00:00| seen|...

CVE-2026-16985

creationtimestamp| type| source ---|---|--- 2026-08-10 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117070392510526892 2026-08-10 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n...

CVE-2026-19389

creationtimestamp| type| source ---|---|--- 2026-08-10 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117069331015574957 2026-08-10 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mspbca4pis24 2026-08-10 04:49:27+00:00| seen|...

CVE-2026-19381

creationtimestamp| type| source ---|---|--- 2026-08-10 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117068623277375334 2026-08-10 01:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msoxaf46yl2v 2026-08-10 02:00:02+00:00| seen|...

CVE-2026-65542

creationtimestamp| type| source ---|---|--- 2026-08-09 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msopq4olk62f 2026-08-09 23:16:10+00:00| seen| https://bsky.app/profile/potato.software/post/3msopq62hwg2i 2026-08-10 19:16:08+00:00| seen|...

CVE-2026-19348

creationtimestamp| type| source ---|---|--- 2026-08-09 12:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k 2026-08-09 12:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23 2026-08-09 16:00:46+00:00| seen|...

GHSA-HHV7-P4PG-WM6P

creationtimestamp| type| source ---|---|--- 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/865 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/925 2026-08-10 00:00:32+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/865 2026-08-10 00:00:33+00:00|...

CVE-2026-71992

creationtimestamp| type| source ---|---|--- 2026-08-09 03:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117063314524225568 2026-08-09 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msmlsamc5x24...

CVE-2026-71990

creationtimestamp| type| source ---|---|--- 2026-08-09 00:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcmg62vl2u 2026-08-09 01:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmf3rxura2a 2026-08-09 04:30:28+00:00| seen|...

CVE-2026-71952

creationtimestamp| type| source ---|---|--- 2026-08-08 17:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkzripjp27 2026-08-08 18:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jyuesx3qptyww 2026-08-09 05:01:17+00:00| seen|...

CVE-2026-16955

creationtimestamp| type| source ---|---|--- 2026-08-08 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117058713911525712 2026-08-08 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskkg4ykio2a 2026-08-08 08:50:01+00:00| seen|...

CVE-2022-4995

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msiwk42bgs2g 2026-08-07 16:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccn4u2pv2w3k3 2026-08-14 18:00:21+00:00| exploited|...

CVE-2026-62896

creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheahnqgq2z 2026-08-07 01:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msheas63f42z 2026-08-08 08:07:07+00:00| seen|...

CVE-2026-50515

creationtimestamp| type| source ---|---|--- 2026-08-07 00:31:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/alhkzpabil5ka 2026-08-07 00:54:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsju4a52p 2026-08-07 18:07:47+00:00| seen|...

EUVD-2026-54149

PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...