48554 matches found
PT-2026-53437
Impact A leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. Details HTTP/1.1 Chunked-Encoding bodies are formatted as a sequence of "chunks", each of which consists of: - chunk length - r - length...
PT-2026-53623
Impact TorchServe's check on allowed urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a file is downloaded, it can be referenced without providing a URL the second time, which...
nginx:1.24 security update
1.24.0-7.0.1.2 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.2 - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial o...
nginx security update
2:1.20.1-28.0.1.el98.3 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-28.3 - Resolves: RHEL-178684 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-182553...
PT-2026-53706
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 Description A double free issue, which occurs when the system attempts to free the same memory location twice, was addressed with improved memory...
PT-2026-53692
Name of the Vulnerable Software and Affected Versions AWS Application Load Balancer affected versions not specified Description Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer when AWS WAF is enabled may allow remote actors to bypass managed rule body inspection. B...
The vulnerabilities of the ngx_http_proxy_v2_module and ngx_http_grpc_module modules in NGINX Plus and NGINX Open Source web servers allow attackers to execute arbitrary code or cause service interruptions.
The vulnerabilities of the ngxhttpproxyv2module and ngxhttpgrpcmodule modules in NGINX Plus and NGINX Open Source web servers are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause...
CVE-2026-13501
creationtimestamp| type| source ---|---|--- 2026-06-28 18:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekt3enxj2p 2026-06-28 19:31:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepm7syd22u 2026-06-29 19:44:25+00:00| seen|...
CVE-2026-13503
creationtimestamp| type| source ---|---|--- 2026-06-28 18:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekk4wyxx2j 2026-06-28 19:29:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpephrd24x2m 2026-06-29 14:50:49+00:00| seen|...
CVE-2026-13504
creationtimestamp| type| source ---|---|--- 2026-06-28 17:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekb6izsd2u 2026-06-28 19:28:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpepfk2nxr2c...
CVE-2026-13503
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
EUVD-2026-40000
A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...
CVE-2026-13495
creationtimestamp| type| source ---|---|--- 2026-06-28 14:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe6rmo6i62p 2026-06-28 14:40:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe7e5htwl2x 2026-06-29 19:46:47+00:00| seen|...
CVE-2026-13498
creationtimestamp| type| source ---|---|--- 2026-06-28 14:20:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe67psnga2t 2026-06-28 14:36:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe74wouru2m 2026-06-29 19:30:51+00:00| seen|...
CVE-2026-13500
A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...
CVE-2026-13497
creationtimestamp| type| source ---|---|--- 2026-06-28 14:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe54zlv2n2u 2026-06-28 14:38:11+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe77bhkbv23 2026-06-29 15:28:53+00:00| seen|...
CVE-2026-13493
creationtimestamp| type| source ---|---|--- 2026-06-28 13:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe4y56cys2y 2026-06-28 14:42:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpe7gmoukj2q 2026-06-29 15:24:48+00:00| seen|...
CVE-2026-13489
A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcpserver.cc of the component MCP Response Handler. This manipulation causes improper synchronization. Remote exploitation of the attack is possible. The attack's...
CVE-2026-13491
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqttprotocol.cc of the component MQTT Goodbye Handler. Performing a manipulation of the argument sessionid results in denial of service. The...
