Skip to content
skopnix
Section C · The archive
Every edition · newest first

The archive.

1,109 dispatchespage 7 / 19№ 749 – 690

  1. Fri 18 Sep 2026

    25 dispatches
    GHSA-cjgj-2fwf-4c2w: Perses's project query parameter authorization bypass exposes cross-project resourcesVULN
  2. GHSA-3753-m2x2-q623: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC rendererVULN
  3. GHSA-7q85-xj36-vmfc: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)VULN
  4. GHSA-p5vg-v7mj-f6q4: Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker CredentialsVULN
  5. GHSA-3w57-8xmc-8v26: AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsVULN
  6. GHSA-82r6-8w77-94w6: AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofingVULN
  7. GHSA-qg2g-g9w3-m5h8: ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateralVULN
  8. GHSA-c8w2-fgvx-vhv4: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated clientEXPL
  9. GHSA-qg67-7m6v-qg25: zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletionVULN
  10. GHSA-gjw4-3v3v-rqxg: Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementVULN
  11. GHSA-39wr-7q6h-cf68: LMDeploy has an SSRF bypassVULN
  12. GHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingVULN
  13. GHSA-2vh9-42vm-xmv2: LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recvEXPL
  14. GHSA-jr78-w6w5-m8f8: Semantic MediaWiki'a missing authorization in the smwtask API module allows unauthenticated accessVULN
  15. Ransomware: n0n → AstraZeneca TürkiyeBRCH
  16. Ransomware: n0n → PayPal support operations (Transcom WorldWide)BRCH
  17. GHSA-26vp-8gxg-v4pg: org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issueEXPL
  18. Ransomware: endzone → AT&TRANS
  19. WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension StorageSUPL
  20. A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and IdentityRSCH
  21. Brevo Supply Chain Attack Injects Malware Into 100,000 WebsitesSUPL
  22. New Check Point flaw lets hackers execute code with root privilegesVULN
  23. Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatchedVULN
  24. Critical Orkes Conductor Vulnerability Exploited in AttacksEXPL
  25. RatHat Android Malware Abuses ADB to Retain Shell Access After UninstallMALW

  26. Thu 17 Sep 2026

    33 dispatches
    GHSA-jq29-c7v8-rg55: Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File DeletionVULN
  27. GHSA-9gm5-9rfh-m6vx: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPVULN
  28. GHSA-x424-64qh-5j54: react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUVULN
  29. GHSA-mrg3-qvqr-jw29: CoreDNS: Unauthenticated memory exhaustion in custom transportsVULN
  30. GHSA-gq9c-wmrm-5hvr: HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of serviceVULN
  31. GHSA-xjw9-38cr-6372: djust: A template binding inherits a context safety grant it never earned (XSS)VULN
  32. GHSA-9395-2g46-rj3f: djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)VULN
  33. GHSA-67c9-f6v2-qv86: Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)VULN
  34. GHSA-hr73-3gpv-hh6q: Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)VULN
  35. GHSA-c3mw-737p-c7g2: Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesVULN
  36. GHSA-vjqc-q4mp-2rvf: CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectionVULN
  37. GHSA-3jhr-mxmx-38cx: Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leakVULN
  38. GHSA-xjw5-q542-3vmr: Grav: config_denied_paths default list omits system, exposing real secrets (e.g. …VULN
  39. GHSA-p597-crqc-m349: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered byVULN
  40. GHSA-g4c3-4g96-6g4m: Chamilo LMS CStudio upload flow allows unauthenticated remote code executionVULN
  41. Ransomware: ransomhouse → PertaminaBRCH
  42. Ransomware: brain cipher → aecom.comBRCH
  43. AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460KEV
  44. GHSA-mggc-4xg6-vcxf: SSH.NET: ScpClient allows server-side RCE via default SCP path handlingVULN
  45. GHSA-c4wf-2xxc-68qm: Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validationVULN
  46. GHSA-5gpm-rgj3-9q76: Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2VULN
  47. GHSA-c5pq-fr2g-9jpf: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrVULN
  48. GHSA-r9c8-gcjp-xfwh: RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer AllocationVULN
  49. GHSA-j497-x9hr-x34x: RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer OverflowVULN
  50. GHSA-33mj-cw25-m34h: RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI ParserVULN
  51. GHSA-465g-fh3v-9jw4: RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter InjectionVULN
  52. GHSA-xwwf-m8fg-p9q2: RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size NegotiationVULN
  53. GHSA-wr57-hqmp-fgvh: Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree PickerVULN
  54. Iranian strikes on AWS facilities left customer data beyond recovery in Bahrain, UAEBRCH
  55. Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS ZoneVULN
  56. Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI useRANS
  57. Chinese hackers use SparroWocky malware in govt espionage attacksAPT
  58. Fragnesia primitive via Open vSwitch. Deterministic local privilege escalation.EXPL

  59. Wed 16 Sep 2026

    2 dispatches
    GHSA-mxm6-v9r6-r94c: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown atVULN
  60. GHSA-9pj6-vhgr-3mwh: RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remoteVULN