CVE-2026-85624 Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList

Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users' private notes...

CVE-2026-70403

creationtimestamp| type| source ---|---|--- 2026-09-04 04:46:28+00:00| seen| https://jvn.jp/en/jp/JVN32505330 2026-09-04 07:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muoi44pycp2g 2026-09-04 08:08:07+00:00| seen|...

PT-2026-85548

Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users' private notes...

PT-2026-89161

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists where role synchronization fails to invalidate cached user records during a privilege demotion. When an administrator is demoted via a trusted role header or OAuth role...

EUVD-2026-70529

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

CVE-2026-50554 Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-mark

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

oscp-notes-2026 — Updated!

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

CVE-2026-50554: Exposure of Sensitive Information to an Unauthorized Actor

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

CVE-2026-83744 invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83744 invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

EUVD-2026-68982

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-81302

creationtimestamp| type| source ---|---|--- 2026-09-01 04:46:14+00:00| seen| https://jvn.jp/en/jp/JVN84094853...

PT-2026-84114

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-001010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001010 advisory. In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols...

CVE-2026-53620

creationtimestamp| type| source ---|---|--- 2026-08-28 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN42348352...

CVE-2026-78032

creationtimestamp| type| source ---|---|--- 2026-08-28 04:45:14+00:00| seen| https://jvn.jp/en/jp/JVN04485476 2026-08-28 08:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cup46pfzqt3bd 2026-08-28 10:07:22+00:00| seen|...

CVE-2026-73827

creationtimestamp| type| source ---|---|--- 2026-08-28 04:45:08+00:00| seen| https://jvn.jp/en/jp/JVN04485476...

CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...

CVE-2026-77438

Trilium (open-source hierarchical note-taking app), in versions up to and including 0.103.0 , has an authorization flaw in its public share-search endpoint . The endpoint authorizes only the ancestor note supplied in the request, then performs a full-text search across the entire published subtre...

CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...