23740 matches found
Duplicate Advisory: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8rxv-jg7p-wvg3. This link is maintained to preserve external references. Original Description Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX...
CVE-2026-13729
creationtimestamp| type| source ---|---|--- 2026-08-01 15:09:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqt5awpo2x 2026-08-01 15:09:50+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzqt76pmk2n 2026-08-01 15:09:58+00:00| seen|...
CVE-2026-14195
creationtimestamp| type| source ---|---|--- 2026-08-01 14:58:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq63q6ne2b 2026-08-01 15:25:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrosopge2x 2026-08-01 15:25:38+00:00| seen|...
CVE-2026-14197
creationtimestamp| type| source ---|---|--- 2026-08-01 14:48:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpnsfhow2l 2026-08-01 15:04:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqjdnouq2p 2026-08-01 15:04:40+00:00| seen|...
CVE-2026-13604
creationtimestamp| type| source ---|---|--- 2026-08-01 14:44:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzpfrbzfr2z 2026-08-01 15:29:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrwzzzan2d 2026-08-01 15:30:05+00:00| seen|...
CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
UBUNTU-CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
CVE-2026-67303
FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...
EUVD-2026-51834
FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...
EUVD-2026-51824
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler railserverhandlemessages in channels/rail/server/railmain.c. When processing a RAIL PDU header, the code subtracts RAILPDUHEADERLENGTH from the peer-controlled orderLength field without firs...
EUVD-2026-51862
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-13458 GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes
The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-67074
Name of the Vulnerable Software and Affected Versions Nex Forms – Ultimate Form Builder – Lite versions prior to 9.2.4 Description An arbitrary file deletion issue exists due to path traversal. The delete file AJAX handler retrieves a file path from the database and passes it to the unlink functi...
PT-2026-67131
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...
CVE-2026-54785 gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consultgeminiwithfiles in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to th...
CVE-2026-68770
creationtimestamp| type| source ---|---|--- 2026-07-31 21:57:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nq3sqt35utpv 2026-07-31 22:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxxbyuldy2z 2026-07-31 22:06:06+00:00| seen|...
SUSE-SU-2026:3444-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations...
EUVD-2026-51627
Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...
