122540 matches found
CVE-2026-52203
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter...
PT-2026-60805
Name of the Vulnerable Software and Affected Versions Chat2DB versions prior to 5.3.0 Description An insecure direct object reference occurs when the application provides direct access to objects based on user-supplied input. In the 'GET /api/connection/datasource/id' endpoint, the handler calls...
Vogls: A Fast Interactive Full-Timing Simulator for Pre-Silicon Power Side-Channel Analysis
Designing hardware circuits resistant to side-channel attacks increasingly relies on simulation to predict device leakage before fabrication. Current functional verification simulators are designed for extended correctness-checking runs and are ill-suited for producing large numbers of short trac...
Microsoft ASP.NET Core privilege escalation vulnerability (CNVD-2026-28484)
Microsoft ASP.NET Core is a cross-platform open-source framework developed by Microsoft. This framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. There is a permission escalation vulnerability in Microsoft ASP.NET Core, which allows...
CVE-2026-52203: Exposure of Sensitive Information to an Unauthorized Actor
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter...
CVE-2026-52203
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter...
CVE-2026-12715: Missing Authorization
Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...
CVE-2026-52203
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information by exploiting the source parameter. No information regarding a newer version containing a fix is currently available. Exploitation details are not provided in the documents.
PT-2026-60865
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description An issue exists in the code validation API endpoint that allows authenticated users to execute arbitrary system commands with the full privileges of the server process. The endpoint...
CVE-2026-14503: Exposure of Sensitive Information to an Unauthorized Actor
The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pclajaxprocessrequestinner. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract force generation of a...
PT-2026-60708
The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pcl ajax process request inner. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract force generation ...
LibreDWG Heap Buffer Overflow DoS
The vulnerability of the dwgnextentity function in the src/dwg.c file of the LibreDWG format processing library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
NGINX HTTP Server Code Execution
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...
CVE-2026-57077
creationtimestamp| type| source ---|---|--- 2026-07-16 23:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgleymol2c 2026-07-17 01:24:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsloopgpk2p...
CVE-2026-15997
creationtimestamp| type| source ---|---|--- 2026-07-16 23:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgakxguz2c...
CVE-2026-14253
creationtimestamp| type| source ---|---|--- 2026-07-16 23:41:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfxkt7h72u...
CVE-2026-11740
creationtimestamp| type| source ---|---|--- 2026-07-16 23:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfuuixjk2i...
CVE-2026-45368
creationtimestamp| type| source ---|---|--- 2026-07-16 23:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfii3i6n2h...