34011 matches found
CVE-2026-48764: Server-Side Request Forgery (SSRF)
TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a forbidden range allowing for DNS rebinding bypass. The root cause is a time-of-check to time-of-use gap in the SSRF guard...
UBUNTU-CVE-2026-53612
Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown...
CVE-2026-54387
creationtimestamp| type| source ---|---|--- 2026-06-17 23:23:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhftygey2v 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c 2026-08-02 15:48:02+00:00| seen|...
CVE-2026-48823
creationtimestamp| type| source ---|---|--- 2026-06-17 22:43:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf6h6akq2f...
MAL-2026-6085 Malicious code in @hotcappuccino/nodepull (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e9bbd7a5cb25d0863ef140b42a7ab2abec1e921e18669eef3f07a91c3d6d99 @hotcappuccino/[email protected] ships a single index.js the package's declared main that is wrapped in an obfuscator.io string-array +...
Malicious code in pino-slite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea546461f3101a972511a0bb9d66b73849904ad3522724d1670b003e108c11bb pino-slite impersonates the legitimate pino logger README titled 'pino-slite Pino' with badges and homepage pointing to getpino.io, exported function...
Malicious code in set-proto-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb11eef3afbfc268bd48a18737884246861c7ae9e6a3d29901ae1379216c633 lib/index.js contains a base64-encoded URL decoding to https://jsonkeeper.com/b/BN77K, an anonymous mutable paste host that is fetched via axios.get;...
Malicious code in boardflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7f48df7609edb5bab9d9e572f093994d071165578a58032a69392d62b08b86 On pip install boardflow, setup.py spawns a background thread that fetches http://pooron.org/test.exe over plain HTTP into the OS temp directory and...
MAL-2026-6080 Malicious code in boardflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7f48df7609edb5bab9d9e572f093994d071165578a58032a69392d62b08b86 On pip install boardflow, setup.py spawns a background thread that fetches http://pooron.org/test.exe over plain HTTP into the OS temp directory and...
EUVD-2026-37552
The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The listingloadmore AJAX handler accepts a filteredquery parameter that is intentionally excluded from the HMAC query signature check to support front-end filter integration. However,...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview org.webjars.npm:undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the HTTP/1.1 client when an attacker-controlled upstream server injects an unsolicited response onto an...
CVE-2026-7300
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Web Integration Service allows Filter Failure through Buffer Overflow. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.3, from 6.1.2 before 6....
GHSA-RJXQ-QQHF-8HWH
creationtimestamp| type| source ---|---|--- 2026-06-17 18:11:20+00:00| seen| https://gist.github.com/alon710/419f4d41351693c7c60ff49637269f97 2026-06-18 20:02:03+00:00| seen| https://gist.github.com/alon710/4e321e5dcf74a8eaf0f99d54a40035e9...
EUVD-2026-37756
Integer Underflow Wrap or Wraparound vulnerability in RTI Connext Micro Core Libraries allows Overread Buffers.This issue affects Connext Micro: from 4.0.0 before 4.3.0...
EUVD-2026-37753
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Web Integration Service allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7., from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1...
EUVD-2026-37770
Heap-based Buffer Overflow vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.0.0...
firefox: thunderbird: Incorrect boundary conditions in the JavaScript Engine: JIT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript Engine: JIT component...
CVE-2026-49268
creationtimestamp| type| source ---|---|--- 2026-06-17 15:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k 2026-06-18 17:05:17+00:00| seen| https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y 2026-06-22 00:31:29+00:00| seen|...