110985 matches found
CVE-2026-19189
creationtimestamp| type| source ---|---|--- 2026-08-07 04:31:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l 2026-08-07 12:14:11+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054167416606582...
CVE-2026-5391
creationtimestamp| type| source ---|---|--- 2026-08-07 03:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u...
CVE-2026-19149
creationtimestamp| type| source ---|---|--- 2026-08-07 02:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z 2026-08-07 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:45+00:00| seen|...
CVE-2026-64638
creationtimestamp| type| source ---|---|--- 2026-08-07 01:53:30+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mshh4queez2r 2026-08-07 13:11:54+00:00| seen| https://infosec.exchange/users/tomcat/statuses/117054394427524887 2026-08-07 14:00:04+00:00|...
[SECURITY] Fedora 43 Update: curl-8.15.0-8.fc43
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2026-56161
creationtimestamp| type| source ---|---|--- 2026-08-07 00:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdw27lmy2l 2026-08-08 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msko5er7ni2x 2026-08-11 19:00:40+00:00| seen|...
CVE-2026-50481
creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...
CVE-2026-43631
creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:14+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuej42h2o...
CVE-2026-70558
creationtimestamp| type| source ---|---|--- 2026-08-07 00:36:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26 2026-08-09 14:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w...
EUVD-2026-54184
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
Linux Distros Unpatched Vulnerability : CVE-2026-71478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link...
CVE-2026-48087
creationtimestamp| type| source ---|---|--- 2026-08-06 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m 2026-08-09 04:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27 2026-08-09 05:28:38+00:00| seen|...
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...
CVE-2026-64653
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...
CVE-2026-48080
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANTADMIN of that tenant, including the databaseUrl field. This field contains...
CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-57818
creationtimestamp| type| source ---|---|--- 2026-08-06 20:59:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dap3dxstobqir 2026-08-07 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msj5joorvl2b...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
CVE-2026-71478
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leading C0 control character, in a...