CVE-2026-67309

creationtimestamp| type| source ---|---|--- 2026-08-02 14:46:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms47yxells24 2026-08-06 18:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rxv-jg7p-wvg3 2026-08-06 19:32:23+00:00| seen|...

CVE-2015-7326

creationtimestamp| type| source ---|---|--- 2026-08-02 14:45:13+00:00| seen| https://t.me/informationsec/185 2026-08-03 02:17:47+00:00| seen| https://t.me/informationsec/185...

CVE-2025-71401

better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...

CVE-2025-71401

better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...

EUVD-2025-210592

better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...

CVE-2025-71401

The connected CVE entry describes a vulnerability in better-auth (npm) before 1.4.2 where an external request can configure baseURL when it is not defined (e.g., BETTER_AUTH_URL unset). An attacker who can trigger the first request after startup can poison the router’s base path, causing all rout...

CVE-2025-71401 better-auth before 1.4.2 basePath Modification DoS

better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...

CVE-2025-71401 better-auth before 1.4.2 basePath Modification DoS

better-auth npm before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined e.g., BETTERAUTHURL is unset. An attacker able to make the very first request to the server after startup can poison the router's base path, causing all routes to return 404 for all users...

CVE-2026-14864

creationtimestamp| type| source ---|---|--- 2026-08-02 11:34:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3vbkl2dd24...

CVE-2026-67291

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oiob3iy2t...

Linux Distros Unpatched Vulnerability : CVE-2026-67338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata...

CVE-2026-67298

creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n...

Exploit for CVE-2025-10897

CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...

CVE-2026-67305

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwrfkiw2h 2026-08-05 02:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msciabr6c623...

CVE-2026-67289

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l 2026-08-02 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117024740061481140 2026-08-05 02:24:03+00:00| seen|...

CVE-2026-67327

creationtimestamp| type| source ---|---|--- 2026-08-01 18:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms22emobp22t 2026-08-01 22:18:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2iruraca22 2026-08-01 22:19:08+00:00| seen|...

CVE-2026-17580

creationtimestamp| type| source ---|---|--- 2026-08-01 17:53:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzymh7nm25 2026-08-01 18:45:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24u4wgky2x 2026-08-01 18:45:08+00:00| seen|...

CVE-2026-16090

creationtimestamp| type| source ---|---|--- 2026-08-01 17:37:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz32c2n52x 2026-08-01 18:58:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms25lk44th2p...

CVE-2026-2916

creationtimestamp| type| source ---|---|--- 2026-08-01 17:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxns7zhq24...

Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rwj8-pgh3-r573. This link is maintained to preserve external references. Original Description GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied...