594 matches found
CVE-2019-16097
CVE-2019-16097 Este programa es solo para investigación de seguridad, ¡no lo utilice con fines ilegales! Daño de la vulnerabilidad Puede permitir que un atacante cree una cuenta de administrador, cargue imágenes maliciosas e infecte a los clientes que utilizan este repositorio. Componente...
cargo-perm
Descripción Se ha encontrado una nueva vulnerabilidad en cargo versión 1.7.0, como se explica aquí. Paso a paso Primero tienes que asegurarte de que tu versión de cargo es vulnerable. cargo --version Supongamos que tengo un proyecto de cargo con el siguiente archivo src/main.rs: use...
Astra Linux – Vulnerability in hunspell
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::left CommonsSubstring in suggestmgr.cxx...
CVE-2025-70820
Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...
pwndoc v1.7.0
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
Node.js Module axios 1.7.0 < 1.18.0 maxBodyLength Bypass (CVE-2026-67317)
The version of the axios Node.js module installed on the remote host is 1.7.0 prior to 1.18.0. It is, therefore, affected by a vulnerability: - axios fails to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers ca...
CVE-2026-19022 OpenHands send_pull_request.py initialize_repo command injection
A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initializerepo of the file OpenHands/resolver/sendpullrequest.py. This manipulation causes command injection. Remote exploitation of the attack is possible. The vendor deleted the original GitHub issue...
EUVD-2026-53834
A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initializerepo of the file OpenHands/resolver/sendpullrequest.py. This manipulation causes command injection. Remote exploitation of the attack is possible. The vendor deleted the original GitHub issue...
CLSA-2026-1785204336 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...
CLSA-2026-1775003192 TuxCare security update for underscore (2 CVEs)
TuxCare rebuilt underscore to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...
CLSA-2026-1773620196 TuxCare security update for growl (1 CVE)
TuxCare rebuilt growl to address 1 CVE. Fixed in 1.7.0-tuxcare.2...
CVE-2026-67332 @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never...
CVE-2026-67332
Technical details (affected products/versions/mitigation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-67327
Better-Auth before 1.6.22 is vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers a victim s email with a chosen password; the account remains unverified. When the victim signs in later...
SUSE CVE-2025-7453
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CLEANSTART-2026-YB97810 Security fixes in prometheus-node-exporter-fips 1.7.0-r1
Package prometheus-node-exporter-fips version 1.7.0-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-XU98118 Security fixes in vault-csi-provider 1.7.0-r0
Package vault-csi-provider version 1.7.0-r0 fixes 20 vulnerabilities: CVE-2026-34986, CVE-2026-33186, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283...
CLEANSTART-2026-SH73570 Security fixes in prometheus-node-exporter-fips 1.7.0-r0
Package prometheus-node-exporter-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37...
CLEANSTART-2026-PV07726 Security fixes in yunikorn-web-fips 1.7.0-r0
Package yunikorn-web-fips version 1.7.0-r0 fixes 24 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-27143, CVE-2025-68121, CVE-2026-42499...
CLEANSTART-2026-YN06108 Security fixes in yunikorn-k8shim 1.7.0-r0
Package yunikorn-k8shim version 1.7.0-r0 fixes 5 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2025-68121, CVE-2025-61732, CVE-2025-47911, CVE-2025-58190...