2104236 matches found
DEBIAN-CVE-2026-92288
Bulletin has no description...
DEBIAN-CVE-2026-95811
Bulletin has no description...
MAL-2026-17167 Malicious code in prosocks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a1ca37b881f19975a8ab8b23bd5e69b51355333374385aabfc5784b69bf95545 The package automatically joins the machine to a proxy network. Depending on the version, it can happen during the package installation or when importing the...
MINI-4H7V-V4VQ-C79W
Bulletin has no description...
ECHO-B9A3-69E9-2A9F
Bulletin has no description...
MINI-X7CR-8MVQ-HVRQ
Bulletin has no description...
MINI-66GX-6PHF-C2C5
Bulletin has no description...
MINI-X64C-364G-PHH6
Bulletin has no description...
MINI-58VX-VG5X-PHV7
Bulletin has no description...
MINI-4JC9-F7M2-FJP9
Bulletin has no description...
MINI-33P3-2WQJ-F7GJ
Bulletin has no description...
MINI-FMG9-RPW9-73GW
Bulletin has no description...
MINI-QVJJ-2448-P2M6
Bulletin has no description...
MINI-HWJQ-2QR8-JGV3
Bulletin has no description...
MINI-F76Q-4G4F-74X9
Bulletin has no description...
MINI-7548-WW8Q-RF4C
Bulletin has no description...
MINI-4VQP-QWC3-MJW7
Bulletin has no description...
MINI-RG49-QH84-J6VM
Bulletin has no description...
MINI-VGF2-RF3R-66G9
Bulletin has no description...
MINI-44V4-V8WC-584R
Bulletin has no description...
MINI-WP5V-WHX2-73W9
Bulletin has no description...
MINI-3H63-6VMX-X4M4
Bulletin has no description...
MINI-RP5F-M5X4-3H7J
Bulletin has no description...
MINI-WQRF-7R6Q-2XP8
Bulletin has no description...
MINI-56G6-4Q68-R7F6
Bulletin has no description...
MINI-PW44-32PC-88QR
Bulletin has no description...
MINI-4W5M-F4HH-F9QH
Bulletin has no description...
MINI-2MJQ-5FH8-RM6P
Bulletin has no description...
MINI-R868-R6GX-WP69
Bulletin has no description...
MINI-QHCF-WJH2-CQ7V
Bulletin has no description...
MINI-8884-MJQV-X4V6
Bulletin has no description...
MINI-W5WX-P36R-MCWG
Bulletin has no description...
MINI-VF7R-F9C2-J4R7
Bulletin has no description...
MINI-44C5-2PCW-W36C
Bulletin has no description...
MINI-7GW3-XF3H-6WV6
Bulletin has no description...
MINI-V58C-M7WM-8534
Bulletin has no description...
MINI-HQ4R-GPJF-G2PR
Bulletin has no description...
MINI-525W-QJ57-W35M
Bulletin has no description...
MINI-C536-WHRC-FJRX
Bulletin has no description...
MINI-R2V3-WPX9-MQ99
Bulletin has no description...
MINI-RGH4-8CWR-95MR
Bulletin has no description...
MINI-X93M-29C7-7JMW
Bulletin has no description...
MINI-763C-VFRM-GV7G
Bulletin has no description...
GHSA-3C93-F73F-QC9H social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
Impact The vk-app backend accepted VK application callback data without verifying the callback signature when the authkey parameter was omitted. Applications using this backend could treat unsigned attacker-controlled data as a verified VK identity. An attacker could choose callback fields such a...
GHSA-X7QQ-23VW-7PFG social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
Impact The LoginRadius backend did not validate OAuth state during the authentication flow. Applications using this backend were vulnerable to login CSRF. An attacker could cause a victim's browser session to complete authentication using an attacker-controlled LoginRadius token, making the victi...
GHSA-FP7W-M676-W7GC social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
Impact The Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Vend user ID could collide in the social-auth association table. A user from one shop coul...
GHSA-VQ6G-G6C7-5F2J social-auth-core has an Improper Authentication issue
Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could allow an attacker with a valid account on a trusted IdP to link the attacker's SAML...
GHSA-F4HC-PPW9-4HHW Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets
Summary Ash fails to consistently strip private action arguments those declared with public?: false when a changeset is built from an untrusted parameter map. Private arguments are meant to be set only by trusted server-side code, but a caller who controls the parameters supplied to an action can...
GHSA-MR95-65J8-9MXP Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 3.12.2 / 4.0.3 removed the recursive re-render loop in trestle/core/commands/author/jinja.py rendertemplate, but the custom include tags in trestle/core/jinja/tags.py MDSectionInclude, MDCleanInclude still...