111983 matches found
CVE-2021-47987
creationtimestamp| type| source ---|---|--- 2026-06-26 02:47:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp5wkxsk6n2h...
Malicious code in mongoose-json-format (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910cc6eef707ac872daeb3a527e6dd9c75044ebb178f9eb48745f5cfd4123968 helpers.js defines a createLog helper that base64-decodes a constant HASHKEY to https://www.jsonkeeper.com/b/XVHGD an anonymous JSON-paste host and...
CVE-2026-9221
creationtimestamp| type| source ---|---|--- 2026-06-26 01:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5tqjbnne2b...
CVE-2026-9220
creationtimestamp| type| source ---|---|--- 2026-06-26 01:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5thiusz52o...
CVE-2025-71333
creationtimestamp| type| source ---|---|--- 2026-06-26 01:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sz445uz2z 2026-07-01 23:35:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmolxzozw2o 2026-07-02 05:07:06+00:00| seen|...
CVE-2025-71336
creationtimestamp| type| source ---|---|--- 2026-06-26 01:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5st4zv2y2p 2026-07-01 23:27:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmo77pnlq2i 2026-07-02 06:07:08+00:00| seen|...
CVE-2025-71340
creationtimestamp| type| source ---|---|--- 2026-06-26 01:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sef4f3q2a...
CVE-2026-48615
Summary: CVE-2026-48615 concerns a flaw in Node.js proxy tunnel error handling that can expose proxy credentials embedded in the proxy URL via the ERR_PROXY_TUNNEL error messages. The leak is tied to error handling paths and could be captured by logs, diagnostics, or other error consumers. Affect...
CVE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2026-50745
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
EUVD-2026-39605
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...
CVE-2017-14913
creationtimestamp| type| source ---|---|--- 2026-06-26 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5nltqbop2r...
PT-2026-52978
Name of the Vulnerable Software and Affected Versions Kestra versions prior to 1.0.43 Kestra versions prior to 1.3.19 Description An authenticated user can perform a path traversal attack to read arbitrary files on the host filesystem that the process has access to, such as /etc/passwd or mounted...
AlmaLinux 10 : buildah (ALSA-2026:29195)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:29195 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...
SUSE SLED15 / SLES15 Security Update : python-PyJWT (SUSE-SU-2026:2626-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2626-1 advisory. This update for python-PyJWT fixes the following issues - CVE-2026-48522: PyJWKClient passes URI arguments...
PT-2026-52849
Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.9 Description A Server-Side Request Forgery SSRF issue exists in the image import functionality. Authenticated users possessing the can create images entitlement can interact with internal network...
RockyLinux 9 : runc (RLSA-2026:29702)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:29702 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...