122590 matches found
CVE-2026-65439
creationtimestamp| type| source ---|---|--- 2026-07-28 00:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro5fhjm5z2g 2026-07-28 14:05:17+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrple3oeuj2z...
CVE-2026-55685
creationtimestamp| type| source ---|---|--- 2026-07-28 00:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4sldjp72o 2026-08-05 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mse7x4p7ls2y 2026-08-05 19:07:07+00:00| seen|...
CVE-2026-65437
creationtimestamp| type| source ---|---|--- 2026-07-28 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4oqccbi27...
EUVD-2026-49865
schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-controlled query string into a path buffer, then invokes urlencode without validating the final string...
ROS-20260728-73-0010
The vulnerability of the Jolokia application programming interface of the Apache ActiveMQ messaging broker is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a configuration XML file...
CVE-2026-51268
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-65882: Improper Neutralization of Input During Web Page Generation
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...
CVE-2026-14171: URL Redirection to Untrusted Site
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-67178: URL Redirection to Untrusted Site
MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-to-HTTPS redirect: Redirect permanent / https://misp.example Apache’s Redirect directive appends any portion of the requested path that follows the matched prefix to the configur...
PT-2026-65688
Name of the Vulnerable Software and Affected Versions Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … version 10.8.7 Description An authentication bypass exists due to a hardcoded backdoor. The arve uc init function, which executes before authentication checks on eve...
PT-2026-65480
Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector...
CVE-2026-66754: Reachable Assertion
Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::removeprefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix whi...
PT-2026-65524
Name of the Vulnerable Software and Affected Versions Rouille versions 0.1.6 through 3.6.2 Description A reachable assertion issue exists in the Request::remove prefix function. Remote unauthenticated attackers can cause a server crash or a 500 error by sending a specially crafted percent-encoded...
PT-2026-65626
Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.1.5 Description The sendFile function in the httpserver/handler.go file incorrectly derives the authorization filename from the raw req.URL.Path while opening the file using a cleaned path. This discrepancy allows an...
Linux Distros Unpatched Vulnerability : CVE-2026-45623
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prio...
CVE-2026-43723
creationtimestamp| type| source ---|---|--- 2026-07-27 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnyt7hlpa2e 2026-07-28 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:20:36+00:00|...
CVE-2026-43749
creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrnysyqcws2c 2026-07-28 04:49:31+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:44+00:00|...
CVE-2026-66758
creationtimestamp| type| source ---|---|--- 2026-07-27 23:00:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnysl4cri2v...
Malicious Package
Overview @httpactions/encode-url is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...