Vulnerabilities
GitPython Argument Injection Flaw Lets Attackers Read Files via Branch Names
A high-severity flaw in GitPython before 3.2.0 allows attackers to leak arbitrary files by manipulating branch names during repository checkout operations.
NVD
Everything NetSec Tribune has reported about NVD: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Edimax BR-6208AC Firmware 1.32 Has Critical Remote Buffer Overflow Flaw
A published exploit targets an unpatched buffer overflow in the Edimax BR-6208AC router, affecting unsupported devices with no vendor response.
Vulnerabilities
OpenSpug Ignored Warnings on Critical OS Command Injection Flaw Affecting v3.0-4.0.1
Researchers disclosed a critical OS command injection flaw in OpenSpug’s file transfer endpoint, affecting versions up to 3.4.0 and 4.0.1 with no vendor fix.
Vulnerabilities
NVD Logs Critical CVE-2026-93933 in ThemeREX Rosalinda 1.2.4 for Object Injection
NVD records a critical deserialization flaw in ThemeREX Rosalinda versions up to 1.2.4, exposing sites to object injection attacks.