13031 matches found
CVE-2025-8412
creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k5ssvac2u 2026-07-20 05:18:00+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k5tfv2525...
Linux Distros Unpatched Vulnerability : CVE-2026-13577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable...
CVE-2026-16227
creationtimestamp| type| source ---|---|--- 2026-07-19 12:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyso7g4eb2a 2026-07-19 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946883494385034 2026-07-19 13:30:29+00:00| seen|...
CVE-2026-16228
creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...
CVE-2026-16223
creationtimestamp| type| source ---|---|--- 2026-07-19 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945821784754940 2026-07-19 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyg4qahpk2n...
CVE-2026-16209
creationtimestamp| type| source ---|---|--- 2026-07-19 08:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqye452ogs2g 2026-07-19 08:30:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mqyegoqwk22f...
CVE-2026-53994
creationtimestamp| type| source ---|---|--- 2026-07-19 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944052588841641 2026-07-19 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxmy73t342g 2026-07-19 06:00:37+00:00| seen|...
CVE-2026-10130
creationtimestamp| type| source ---|---|--- 2026-07-18 22:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116943344312678030 2026-07-18 22:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxcw4d2h424 2026-07-18 23:35:46+00:00| seen|...
CVE-2026-16097
creationtimestamp| type| source ---|---|--- 2026-07-18 12:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwcfugluu2i 2026-07-18 13:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwd3pdrpx23 2026-07-18 13:43:50+00:00| seen|...
CVE-2026-54335
creationtimestamp| type| source ---|---|--- 2026-07-17 23:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j 2026-07-18 00:00:07+00:00| seen| https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x...
Gitea has insufficient permission checks for Composer package source links
CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. Summary A critical vulnerability has been discovered in Gitea. It was already reported via...
EUVD-2026-41635
Gitea has insufficient permission checks for Composer package source links...
GHSA-8QW8-RQ86-9PC2 Gitea has insufficient permission checks for Composer package source links
CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. Summary A critical vulnerability has been discovered in Gitea. It was already reported via...
CVE-2026-45162
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, multiple Pimcore locations call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, including lib/Tool/Authentication.php, models/Site/Dao.php...
CVE-2026-48045 Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...
CVE-2026-48045
The CVE-2026-48045 issue affects python-zeroconf (Zeroconf Pure Python) where AsyncListener.handle_query_or_defer retains every truncated TC-bit mDNS query per source in self._deferred[addr] and arms per-address timers in self._timers[addr]. This unbounded queue growth on LAN-local hosts (UDP/535...
CVE-2026-48045 Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...
CVE-2026-48045 Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...
CVE-2026-11386
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...
UBUNTU-CVE-2026-11386
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...