111158 matches found
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
A flaw was found in Node.js. When proxy credentials are embedded in a proxy URL, an issue in the proxy tunnel error handling can lead to the exposure of these credentials. This information disclosure vulnerability allows an attacker to potentially capture sensitive proxy credentials through logs,...
CVE-2023-48056
creationtimestamp| type| source ---|---|--- 2026-07-06 04:51:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc6e4cbb2f...
CVE-2026-14787
creationtimestamp| type| source ---|---|--- 2026-07-06 04:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpx7gnkinz2c 2026-07-07 23:59:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq3sqqm3dl2y...
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...
CVE-2020-21733
creationtimestamp| type| source ---|---|--- 2026-07-06 02:18:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzmff2qf2b...
CVE-2026-14803
creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...
CVE-2021-28927
creationtimestamp| type| source ---|---|--- 2026-07-06 01:58:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwyiouca52i...
CVE-2026-49420
creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...
CVE-2026-14771
creationtimestamp| type| source ---|---|--- 2026-07-06 00:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwszzn37a2n 2026-07-07 08:03:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25ejsrx42g...
CVE-2026-10657
creationtimestamp| type| source ---|---|--- 2026-07-06 00:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwsd2euuv22 2026-07-07 12:06:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2kwdklox2s...
CVE-2026-59519
creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...
PT-2026-56075
Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.17 Coder versions prior to 2.32.7 Coder versions prior to 2.33.8 Coder versions prior to 2.34.2 Description The coder open app command opens external workspace-app URLs without validating the scheme or host. If an...
PT-2026-55971
Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...
RHCOS 4 : OpenShift Container Platform 4.15.66 (RHSA-2026:28961)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28961 advisory. - golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 - crypto/x509: golang: Denial of Service...
CVE-2026-59520
creationtimestamp| type| source ---|---|--- 2026-07-05 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrsytwez2p 2026-07-07 08:04:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25geh37n2v...
CVE-2026-49097
creationtimestamp| type| source ---|---|--- 2026-07-05 20:27:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfypfiwx2f 2026-07-09 03:53:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qbtwq7k2y 2026-07-20 15:00:03+00:00| published-proof-of-concept|...
CVE-2026-49086
creationtimestamp| type| source ---|---|--- 2026-07-05 20:17:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwffn4twj2n 2026-07-20 15:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94308 2026-07-21 00:00:38+00:00| published-proof-of-concept|...
CVE-2026-14761
creationtimestamp| type| source ---|---|--- 2026-07-05 20:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpweu4lmsj24 2026-07-06 06:51:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitreb4b2b...