5036 matches found
CVE-2026-13476
creationtimestamp| type| source ---|---|--- 2026-08-13 00:37:01+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117085400005390135...
ECHO-5E25-20A4-1DE0
Bulletin has no description...
ECHO-B395-A7AB-D901
Bulletin has no description...
ECHO-6224-38B9-B98E
Bulletin has no description...
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...
CVE-2026-70458
rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...
CVE-2026-53790
rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNCCONNECTPROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shel...
CVE-2026-53796
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-53785
rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...
CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
CVE-2026-71846
creationtimestamp| type| source ---|---|--- 2026-08-12 23:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7lhunq4xxei6a...
CVE-2026-50060
creationtimestamp| type| source ---|---|--- 2026-08-12 23:00:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mswab7irh72p 2026-08-12 23:00:57+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117085021129724985...
CVE-2026-73501
creationtimestamp| type| source ---|---|--- 2026-08-12 22:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw74epkjn2b 2026-08-12 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswaavudbs2t...
CVE-2026-19002
creationtimestamp| type| source ---|---|--- 2026-08-12 22:02:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zlhs4y26 2026-08-13 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2...
CVE-2026-73418
creationtimestamp| type| source ---|---|--- 2026-08-12 22:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4wybcvq2u...
CVE-2026-19001
creationtimestamp| type| source ---|---|--- 2026-08-12 21:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw37annab2e 2026-08-12 22:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zemw7z2l 2026-08-13 12:45:10+00:00| seen|...
CVE-2026-59539
creationtimestamp| type| source ---|---|--- 2026-08-12 21:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msw2gcpaiv2m...
CVE-2026-63296
creationtimestamp| type| source ---|---|--- 2026-08-12 21:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw23idgx324...
CVE-2026-73303
creationtimestamp| type| source ---|---|--- 2026-08-12 21:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmsvtfy2m 2026-08-14 02:20:06+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msz3uquz5e23...