111966 matches found
CVE-2026-13422
creationtimestamp| type| source ---|---|--- 2026-06-27 06:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparxtkgla2b 2026-06-27 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpba3raesw2v 2026-06-29 19:26:20+00:00| seen|...
CVE-2026-13331
creationtimestamp| type| source ---|---|--- 2026-06-27 05:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparov4yk72s 2026-06-27 08:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpazf6ojtj2g 2026-06-29 19:22:24+00:00| seen|...
CVE-2026-13136
creationtimestamp| type| source ---|---|--- 2026-06-27 04:44:44+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mpanl5wjdk2a 2026-06-30 02:15:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mphwmpxdb42x 2026-06-30 14:45:07+00:00| seen|...
CVE-2025-60467
creationtimestamp| type| source ---|---|--- 2026-06-27 03:32:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpajkjapgq2v 2026-06-28 02:30:49+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422 2026-06-29 23:49:46+00:00| seen|...
GHSA-72R4-9C5J-MJ57
creationtimestamp| type| source ---|---|--- 2026-06-27 01:42:35+00:00| seen| https://gist.github.com/alon710/8e13d6d37310b61ef33c4ee0f35eeb61...
[SECURITY] Fedora 44 Update: lighttpd-1.4.84-1.fc44
lighttpd pronounced /lighty/ is a secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. lighttpd uses memory and CPU efficiently and has lower resource use than other popular web servers. Its advanced feature-set FastCGI, CGI, Auth,...
CVE-2026-49336
creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:44+00:00| published-proof-of-concept| https://github.com/microsoft/kiota-typescript/security/advisories/GHSA-396q-4vc8-28x9...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2507)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...
GHSA-9RC6-8CJV-RCVX Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection
Description The getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request's Host header with a fixed path, with zero validation of the Host header: go func getRedirectURLc gin.Context string scheme := "http://" referer := c.Request.Referer if...
ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass
Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...
GHSA-8JGF-23Q5-X7XX ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass
Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...
CVE-2026-45807
creationtimestamp| type| source ---|---|--- 2026-06-26 22:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ziubtsx2c 2026-06-27 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcarecjsf2g 2026-06-29 14:48:32+00:00| seen|...
CVE-2024-23581
creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ywxayrf2x 2026-06-29 14:40:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpsovehl2w 2026-06-29 14:40:43+00:00| seen|...
CVE-2026-45807
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client and pass it through StorageInterface.parentTraversalGuard before reading the underlying file from the local storage backend. The guard onl...
CVE-2026-53576
creationtimestamp| type| source ---|---|--- 2026-06-26 22:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xlajhsm2c 2026-06-27 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcar4z6g52m 2026-06-29 19:25:26+00:00| seen|...
EUVD-2026-31691
Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes...
CVE-2026-46604
creationtimestamp| type| source ---|---|--- 2026-06-26 21:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wh7n3cg2m 2026-06-29 14:45:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq3cj5ah2o...
Cargo can be coerced to share credentials between registries
The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using the sparse index protocol1. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a...