4280 matches found
CVE-2026-6303
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-4135
creationtimestamp| type| source ---|---|--- 2026-04-15 15:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkaawo7kw2t...
CVE-2026-40786
creationtimestamp| type| source ---|---|--- 2026-04-15 12:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvqslckj2g...
CVE-2026-33808 @fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify router normalization options are enabled. This allows complete bypass of path-scoped authentication middleware via duplicate slashes when ignoreDuplicateSlashes is enabled, or...
CVE-2026-41233
creationtimestamp| type| source ---|---|--- 2026-04-15 06:39:50+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-jvx4-xv3m-hrj4...
CVE-2026-41230
creationtimestamp| type| source ---|---|--- 2026-04-15 06:37:20+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-47hf-23pw-3m8c 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04 2026-04-26 00:00:07+00:00| seen|...
CVE-2026-5756
creationtimestamp| type| source ---|---|--- 2026-04-14 20:17:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji76e35s22o 2026-04-16 15:19:33+00:00| seen| Telegram/xaMuklUmIhmgdshubo3uV9apJJHbiRRivMdJ18LxU3A0Q4Q...
CVE-2026-26291
creationtimestamp| type| source ---|---|--- 2026-04-14 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN62079296 2026-04-15 08:37:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjikmbqs623...
CVE-2026-27283
creationtimestamp| type| source ---|---|--- 2026-04-14 17:58:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhxgns26s2e 2026-04-14 20:03:31+00:00| seen| Telegram/BoOqWaO3KXSkNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ 2026-04-16 18:37:08+00:00| seen|...
CVE-2026-39815
creationtimestamp| type| source ---|---|--- 2026-04-14 16:34:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhspovl5m2k 2026-04-14 17:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhvps2k352o 2026-04-14 17:28:30+00:00| seen|...
CVE-2026-32074
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:10:49+00:00| seen| Telegram/Ms21XGSiFH8l9m-UBaczlbYymgDr8KZJGW6Umjgd2osc 2026-04-15 06:53:38+00:00| seen|...
CVE-2026-32090
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:12:09+00:00| seen| Telegram/oEQn8vGzt9amdZwPj0LpHOqAegFTLvvnHRc5FBkCf3mZpAs 2026-04-14 20:12:17+00:00| seen|...
CVE-2026-27907
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 20:07:55+00:00| seen| Telegram/b-0H5pCtilxNZxS-gRRPsAWUA3zqxMoGzwWTkVBCMIvH7s 2026-04-15 06:53:38+00:00| seen|...
GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes
CVE-2026-32631 is regarding a vulnerability where it is possible to obtain a user's NTLM hash by tricking them into cloning a malicious repository, or checking out a malicious branch that accesses an attacker-controlled server. By default, NTLM authentication does not need any user interaction...
CVE-2026-25654
creationtimestamp| type| source ---|---|--- 2026-04-14 03:04:52+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20 2026-04-14 09:51:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjh46vwdxg2s 2026-04-14 10:16:11+00:00| seen|...
GHSA-VFFH-X6R8-XX99 vulnerabilities
Vulnerabilities for packages: grafana, datadog-agent, nrdot-collector, karma-fips, loki, mc-fips, istio-fips, mcp-grafana-fips, aws-otel-collector-fips, prometheus, certificate-transparency-fips, certificate-transparency, node-problem-detector, cloud-sql-proxy, beats, prometheus-fips,...
CVE-2026-39979
creationtimestamp| type| source ---|---|--- 2026-04-14 01:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg73rsmom2m 2026-07-02 06:57:02+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702 2026-07-10 15:54:18+00:00| seen...
Moderate: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: tornado-python: Tornado: Denial of Service via large multipart bodies CVE-2026-31958 For more details about the security issues, including the impact, a CVSS score,...
Medium: runc
Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...