33899 matches found
CVE-2026-67298
creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n...
GHSA-8VR5-263F-X5R3
creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d...
CVE-2026-13329
creationtimestamp| type| source ---|---|--- 2026-08-01 14:52:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzptphv2b25...
CVE-2026-14315
creationtimestamp| type| source ---|---|--- 2026-08-01 14:34:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzotoz37a2z 2026-08-01 14:34:35+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzou5dfd322 2026-08-01 14:34:36+00:00| seen|...
CVE-2026-67340
creationtimestamp| type| source ---|---|--- 2026-08-01 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzlbintyl2c 2026-08-01 13:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2xavbtzc3oidi 2026-08-01 15:00:33+00:00| seen|...
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-59247
creationtimestamp| type| source ---|---|--- 2026-08-01 12:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrzjafqkzk2f...
CVE-2026-67327 better-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP
better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...
CVE-2026-67327
better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...
CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
EUVD-2026-51861
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342
ArcadeDB is affected in versions before 26.7.2 where an authorization bypass exists in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints, failing to validate database access permissions. Attackers can call affected endpoints with arbitrary database parameters to access and m...
CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
Malicious code in nvtorch-oot-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92503f2178663997d57ffa45fbb89f4a55de70e94f66745b4edf283a98e830f The package's setup.py issues an install-time HTTP request to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/nvtorchootnightly...
MAL-2026-11426 Malicious code in trtllm-subdir-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2babc3deb7dd71a0515beeb63a43a5ab1b24bea455226652da9ea9377d1e5f setup.py performs an unconditional HTTP GET to the hardcoded bare-IP URL http://167.233.212.138/cb/db27bcff144c059f/trtllmsubdirtest at install time...
