[go: up one dir, main page]

DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-15157: CVE-2026-15157: CRLF Injection in undici HTTP/1.1 Dispatcher
cverports profile

CVE-2026-15157: CVE-2026-15157: CRLF Injection in undici HTTP/1.1 Dispatcher

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-54272: CVE-2026-54272: SSRF and Trust-Boundary Bypass via Input Misclassification in ip-address Library
cverports profile

CVE-2026-54272: CVE-2026-54272: SSRF and Trust-Boundary Bypass via Input Misclassification in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server
cverports profile

CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69198: CVE-2026-69198: Server-Side Request Forgery Bypass via CIDR Suffix in ip-address Library
cverports profile

CVE-2026-69198: CVE-2026-69198: Server-Side Request Forgery Bypass via CIDR Suffix in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
GHSA-3F7W-8RR8-F37F: GHSA-3f7w-8rr8-f37f: Arbitrary File Overwrite and Read via Unguarded Argument Forwarding in GitPython
cverports profile

GHSA-3F7W-8RR8-F37F: GHSA-3f7w-8rr8-f37f: Arbitrary File Overwrite and Read via Unguarded Argument Forwarding in GitPython

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-539M-9XH6-Q6RR: GHSA-539m-9xh6-q6rr: Arbitrary File Read and SSRF in GitPython via Missing Argument Denylist Sanitization
cverports profile

GHSA-539M-9XH6-Q6RR: GHSA-539m-9xh6-q6rr: Arbitrary File Read and SSRF in GitPython via Missing Argument Denylist Sanitization

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-P538-C434-8V24: GHSA-P538-C434-8V24: Arbitrary File Truncation via Argument Injection in GitPython Commit.count
cverports profile

GHSA-P538-C434-8V24: GHSA-P538-C434-8V24: Arbitrary File Truncation via Argument Injection in GitPython Commit.count

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-69240: CVE-2026-69240: SQL Injection Vulnerability in Sequelize ORM Oracle Dialect
cverports profile

CVE-2026-69240: CVE-2026-69240: SQL Injection Vulnerability in Sequelize ORM Oracle Dialect

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59881: CVE-2026-59881: Unnegotiated WebSocket RSV1 Frame Handling in aiohttp
cverports profile

CVE-2026-59881: CVE-2026-59881: Unnegotiated WebSocket RSV1 Frame Handling in aiohttp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69243: CVE-2026-69243: HTTP Request Smuggling via WebSocket Upgrade State Desynchronization in aiohttp
cverports profile

CVE-2026-69243: CVE-2026-69243: HTTP Request Smuggling via WebSocket Upgrade State Desynchronization in aiohttp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69245: CVE-2026-69245: Noncanonical Cookie Domain Keeps Subdomain Scope in Guzzle
cverports profile

CVE-2026-69245: CVE-2026-69245: Noncanonical Cookie Domain Keeps Subdomain Scope in Guzzle

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69246: CVE-2026-69246: Host Validation Bypass in Guzzle HTTP Client Leading to SSRF
cverports profile

CVE-2026-69246: CVE-2026-69246: Host Validation Bypass in Guzzle HTTP Client Leading to SSRF

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69247: CVE-2026-69247: Bleichenbacher Oracle in pyca/cryptography PKCS#7 Decryption
cverports profile

CVE-2026-69247: CVE-2026-69247: Bleichenbacher Oracle in pyca/cryptography PKCS#7 Decryption

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69249: CVE-2026-69249: Exponential Backtracking Denial of Service in python-cryptography X.509 Verification Engine
cverports profile

CVE-2026-69249: CVE-2026-69249: Exponential Backtracking Denial of Service in python-cryptography X.509 Verification Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69248: CVE-2026-69248: Name Constraints Bypass via Wildcard SANs in Python cryptography
cverports profile

CVE-2026-69248: CVE-2026-69248: Name Constraints Bypass via Wildcard SANs in Python cryptography

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69244: CVE-2026-69244: Heap Out-of-Bounds Read in aiohttp C-Parser Error Handling
cverports profile

CVE-2026-69244: CVE-2026-69244: Heap Out-of-Bounds Read in aiohttp C-Parser Error Handling

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-69192: CVE-2026-69192: SSRF Bypass via Parser Differential (Octal vs Decimal) in ip-address JavaScript Library
cverports profile

CVE-2026-69192: CVE-2026-69192: SSRF Bypass via Parser Differential (Octal vs Decimal) in ip-address JavaScript Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69151: CVE-2026-69151: Stored Cross-Site Scripting (XSS) in Angular Compiler i18n Pipeline via Event-Handler Attributes
cverports profile

CVE-2026-69151: CVE-2026-69151: Stored Cross-Site Scripting (XSS) in Angular Compiler i18n Pipeline via Event-Handler Attributes

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-69153: CVE-2026-69153: Arbitrary File Read via Path Traversal in PostCSS
cverports profile

CVE-2026-69153: CVE-2026-69153: Arbitrary File Read via Path Traversal in PostCSS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69152: CVE-2026-69152: Denial of Service via Resource Exhaustion in brace-expansion
cverports profile

CVE-2026-69152: CVE-2026-69152: Denial of Service via Resource Exhaustion in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68945: CVE-2026-68945: Cache-Key Ambiguity in Angular HttpTransferCache Leading to State Poisoning
cverports profile

CVE-2026-68945: CVE-2026-68945: Cache-Key Ambiguity in Angular HttpTransferCache Leading to State Poisoning

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-43501: CVE-2026-43501: Heap Out-of-Bounds Write in Linux Kernel IPv6 RPL Segment Routing Header Processing
cverports profile

CVE-2026-43501: CVE-2026-43501: Heap Out-of-Bounds Write in Linux Kernel IPv6 RPL Segment Routing Header Processing

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-58263: CVE-2026-58263: Mutation Cross-Site Scripting (mXSS) in Jodit Editor clean-html Sanitizer
cverports profile

CVE-2026-58263: CVE-2026-58263: Mutation Cross-Site Scripting (mXSS) in Jodit Editor clean-html Sanitizer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-65841: CVE-2026-65841: Client-Side Cross-Site Scripting (XSS) via Foreign Namespace Sanitization Bypass in Jodit Editor
cverports profile

CVE-2026-65841: CVE-2026-65841: Client-Side Cross-Site Scripting (XSS) via Foreign Namespace Sanitization Bypass in Jodit Editor

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53510: CVE-2026-53510: Remote Code Execution via Dynamic WSDL Parsing in Savon Ruby SOAP Client
cverports profile

CVE-2026-53510: CVE-2026-53510: Remote Code Execution via Dynamic WSDL Parsing in Savon Ruby SOAP Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53466: CVE-2026-53466: Integer Conversion Overflow in ImageMagick XCF Decoder
cverports profile

CVE-2026-53466: CVE-2026-53466: Integer Conversion Overflow in ImageMagick XCF Decoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53599: CVE-2026-53599: Authenticated Remote Code Execution in REDAXO CMS via Mediapool File Upload Validation Bypass
cverports profile

CVE-2026-53599: CVE-2026-53599: Authenticated Remote Code Execution in REDAXO CMS via Mediapool File Upload Validation Bypass

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-52887: CVE-2026-52887: Critical SQL Injection and Remote Code Execution in NocoBase
cverports profile

CVE-2026-52887: CVE-2026-52887: Critical SQL Injection and Remote Code Execution in NocoBase

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53606: CVE-2026-53606: Stored Cross-Site Scripting (XSS) via Unsanitized URI-bearing Attributes in sanitize-html
cverports profile

CVE-2026-53606: CVE-2026-53606: Stored Cross-Site Scripting (XSS) via Unsanitized URI-bearing Attributes in sanitize-html

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53609: CVE-2026-53609: Server-Side Prototype Pollution in ApostropheCMS
cverports profile

CVE-2026-53609: CVE-2026-53609: Server-Side Prototype Pollution in ApostropheCMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53607: CVE-2026-53607: Server-Side Request Forgery in ApostropheCMS via Host Header Manipulation
cverports profile

CVE-2026-53607: CVE-2026-53607: Server-Side Request Forgery in ApostropheCMS via Host Header Manipulation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53608: CVE-2026-53608: Stored Cross-Site Scripting in @apostrophecms/seo via Unsanitized Tracking IDs
cverports profile

CVE-2026-53608: CVE-2026-53608: Stored Cross-Site Scripting in @apostrophecms/seo via Unsanitized Tracking IDs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54909: CVE-2026-54909: Remote Denial of Service in Pion STUN via Malformed XOR-MAPPED-ADDRESS Attribute
cverports profile

CVE-2026-54909: CVE-2026-54909: Remote Denial of Service in Pion STUN via Malformed XOR-MAPPED-ADDRESS Attribute

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54908: CVE-2026-54908: Remote Denial of Service via Out-of-Bounds Read in Pion DTLS Handshake Parsing
cverports profile

CVE-2026-54908: CVE-2026-54908: Remote Denial of Service via Out-of-Bounds Read in Pion DTLS Handshake Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53573: CVE-2026-53573: Open Redirect Bypass in GeoNetwork OAuth2/OIDC and Keycloak Login Filters
cverports profile

CVE-2026-53573: CVE-2026-53573: Open Redirect Bypass in GeoNetwork OAuth2/OIDC and Keycloak Login Filters

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54768: CVE-2026-54768: User Enumeration and Profile Leak in WPGraphQL via Deprecated Field Resolver
cverports profile

CVE-2026-54768: CVE-2026-54768: User Enumeration and Profile Leak in WPGraphQL via Deprecated Field Resolver

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54785: CVE-2026-54785: Local File Read via Directory Traversal in gemini-bridge MCP Server
cverports profile

CVE-2026-54785: CVE-2026-54785: Local File Read via Directory Traversal in gemini-bridge MCP Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler
cverports profile

CVE-2026-54910: CVE-2026-54910: Multiple Path Traversal Vulnerabilities in FileBrowser Quantum Subtitle Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54787: CVE-2026-54787: Insufficient Timestamp Validation in sigstore-go Key Verification Path
cverports profile

CVE-2026-54787: CVE-2026-54787: Insufficient Timestamp Validation in sigstore-go Key Verification Path

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53551: CVE-2026-53551: Improper Input Validation in free5GC Authentication Server Function (AUSF)
cverports profile

CVE-2026-53551: CVE-2026-53551: Improper Input Validation in free5GC Authentication Server Function (AUSF)

#security #cve #cybersecurity
Comments
2 min read
GHSA-3WHF-VGF2-9W6G: GHSA-3WHF-VGF2-9W6G: Denial of Service via Unbounded Recursion and State Panic in zaino-state
cverports profile

GHSA-3WHF-VGF2-9W6G: GHSA-3WHF-VGF2-9W6G: Denial of Service via Unbounded Recursion and State Panic in zaino-state

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-53504: CVE-2026-53504: Regular Expression Denial of Service (ReDoS) in Thumbor Convolution Filter
cverports profile

CVE-2026-53504: CVE-2026-53504: Regular Expression Denial of Service (ReDoS) in Thumbor Convolution Filter

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54737: CVE-2026-54737: Prototype Pollution in @phun-ky/defaults-deep
cverports profile

CVE-2026-54737: CVE-2026-54737: Prototype Pollution in @phun-ky/defaults-deep

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54729: CVE-2026-54729: SSRF Protection Bypass in dssrf-js via NXDOMAIN Resolution Discrepancy
cverports profile

CVE-2026-54729: CVE-2026-54729: SSRF Protection Bypass in dssrf-js via NXDOMAIN Resolution Discrepancy

#security #cve #cybersecurity
Comments
2 min read
GHSA-XRMJ-5G4G-8987: GHSA-xrmj-5g4g-8987: Workflow Template Injection in @dynatrace-oss/dynatrace-mcp-server
cverports profile

GHSA-XRMJ-5G4G-8987: GHSA-xrmj-5g4g-8987: Workflow Template Injection in @dynatrace-oss/dynatrace-mcp-server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-67437: CVE-2026-67437: Unauthenticated Denial of Service via OAuth2 State Memory Exhaustion in OliveTin
cverports profile

CVE-2026-67437: CVE-2026-67437: Unauthenticated Denial of Service via OAuth2 State Memory Exhaustion in OliveTin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67439: CVE-2026-67439: Incorrect Authorization Leading to Log Leak in OliveTin
cverports profile

CVE-2026-67439: CVE-2026-67439: Incorrect Authorization Leading to Log Leak in OliveTin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67438: CVE-2026-67438: OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check in OliveTin
cverports profile

CVE-2026-67438: CVE-2026-67438: OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check in OliveTin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63118: CVE-2026-63118: DNS-Rebinding and Cross-Origin Request Execution in Model Context Protocol (MCP) Ruby SDK
cverports profile

CVE-2026-63118: CVE-2026-63118: DNS-Rebinding and Cross-Origin Request Execution in Model Context Protocol (MCP) Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63119: CVE-2026-63119: Denial of Service via Uncontrolled Resource Consumption in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-63119: CVE-2026-63119: Denial of Service via Uncontrolled Resource Consumption in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67430: CVE-2026-67430: Denial of Service via Unbounded Session Retention in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-67430: CVE-2026-67430: Denial of Service via Unbounded Session Retention in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67432: CVE-2026-67432: High Severity Denial of Service in Model Context Protocol (MCP) Ruby SDK
cverports profile

CVE-2026-67432: CVE-2026-67432: High Severity Denial of Service in Model Context Protocol (MCP) Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67431: CVE-2026-67431: Session Poisoning via Improper Access Control in Model Context Protocol Ruby SDK
cverports profile

CVE-2026-67431: CVE-2026-67431: Session Poisoning via Improper Access Control in Model Context Protocol Ruby SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67435: CVE-2026-67435: Custom Authentication Header Leakage via Cross-Origin Redirects in linuxfabrik-lib
cverports profile

CVE-2026-67435: CVE-2026-67435: Custom Authentication Header Leakage via Cross-Origin Redirects in linuxfabrik-lib

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67429: CVE-2026-67429: Arbitrary File Write and Path Traversal in Flyto2 Core Modules
cverports profile

CVE-2026-67429: CVE-2026-67429: Arbitrary File Write and Path Traversal in Flyto2 Core Modules

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67427: CVE-2026-67427: Host Environment Variable Access Policy Bypass via Template Interpolation in Flyto2 Core
cverports profile

CVE-2026-67427: CVE-2026-67427: Host Environment Variable Access Policy Bypass via Template Interpolation in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67425: CVE-2026-67425: Insecure Credential Forwarding in Flyto2 Core
cverports profile

CVE-2026-67425: CVE-2026-67425: Insecure Credential Forwarding in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui
cverports profile

CVE-2025-4318: CVE-2025-4318: Remote Code Execution in AWS Amplify codegen-ui

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67426: CVE-2026-67426: Unauthenticated Remote Code Execution and Secret Exfiltration in Flyto2 Core
cverports profile

CVE-2026-67426: CVE-2026-67426: Unauthenticated Remote Code Execution and Secret Exfiltration in Flyto2 Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-66066: CVE-2026-66066: Pre-Authentication Arbitrary File Read and Remote Code Execution in Ruby on Rails Active Storage
cverports profile

CVE-2026-66066: CVE-2026-66066: Pre-Authentication Arbitrary File Read and Remote Code Execution in Ruby on Rails Active Storage

#security #cve #cybersecurity
Comments
2 min read
loading...