112834 matches found
RHEL 10 : rhc (RHSA-2026:7328)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:7328 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...
CVE-2026-40029
creationtimestamp| type| source ---|---|--- 2026-04-08 23:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizhssed572z 2026-04-09 01:27:57+00:00| published-proof-of-concept| Telegram/FNxyO19LE7y9kKO2yVURtyHZPYuEYu862yh0OCJKtv1fs 2026-04-09 05:15:18+00:00| seen|...
CVE-2026-30815
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-13 05:33:41+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mje5dkd3ls2g 2026-05-07 14:00:13+00:00| seen|...
CVE-2026-24987
creationtimestamp| type| source ---|---|--- 2026-04-08 23:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizh5uqn4j2h...
CVE-2026-40032
creationtimestamp| type| source ---|---|--- 2026-04-08 23:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizgxwgcb32s 2026-04-09 01:28:04+00:00| published-proof-of-concept| Telegram/ppPYRB7DfIS8K7XD1dDGxWPkeD0WXLmtAHjzWOZBPf3GFDk 2026-04-09 06:00:21+00:00| seen|...
CLSA-2026-1775688811 Fix CVE(s): CVE-2026-32748, CVE-2026-33526
SECURITY UPDATE: denial of service via use-after-free in ICP - debian/patches/CVE-2026-33526.patch: remove duplicate rfc1738escape call in icpGetRequest that invalidated the previously escaped URL pointer - CVE-2026-33526 SECURITY UPDATE: denial of service via use-after-free in ICP request handli...
CVE-2026-39890
creationtimestamp| type| source ---|---|--- 2026-04-08 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizetxhbte2n 2026-04-09 01:27:32+00:00| published-proof-of-concept| Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0yFvD1Y 2026-04-09 06:00:37+00:00| seen|...
DEBIAN-CVE-2026-5880
Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-3438
A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...
CVE-2026-3438 Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages
A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...
CVE-2026-35401
creationtimestamp| type| source ---|---|--- 2026-04-08 21:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbl575ko27 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:15:52+00:00| seen|...
CVE-2026-34985
creationtimestamp| type| source ---|---|--- 2026-04-08 21:37:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizauftpef22...
CVE-2026-35446
creationtimestamp| type| source ---|---|--- 2026-04-08 21:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizanh3xag2i 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:06:03+00:00| seen|...
EUVD-2025-209347
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...
EUVD-2025-209345
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /urlrule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log...
CVE-2026-5808
A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c. This impacts an unknown function of the file apps/dashboard/src/app/dashboard/onboarding/client.tsx of the component Onboarding Endpoint. The manipulation of the argument callbackURL results in...
CVE-2026-5808 openstatusHQ openstatus Onboarding Endpoint client.tsx cross site scripting
A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c. This impacts an unknown function of the file apps/dashboard/src/app/dashboard/onboarding/client.tsx of the component Onboarding Endpoint. The manipulation of the argument callbackURL results in...
CVE-2026-5808
The CVE-2026-5808 entry affects openstatusHQ OpenStatus with the Onboarding Endpoint component. The vulnerability is tied to the file apps/dashboard/src/app/(dashboard)/onboarding/client.tsx, where manipulation of the argument callbackURL enables cross-site scripting. It can be triggered remotely...