64403 matches found
CVE-2026-65702
Vulnerability CVE-2026-65702 affects Vanna 2.0.2 in the FileSystemConversationStore persistence integration. A path traversal flaw allows unauthenticated remote attackers to use the conversation_id parameter in the unauthenticated chat API to escape the base directory, enabling arbitrary file wri...
CVE-2026-47755
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.05, low-privileged authenticated agent can retrieve plaintext credentials and TOTP secrets belonging to another client by directly requesting the credential edit modal wit...
CVE-2026-65699
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...
CVE-2026-61184
creationtimestamp| type| source ---|---|--- 2026-07-23 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcku3brp24 2026-07-23 18:17:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 23:07:06+00:00| seen|...
CVE-2026-60363
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:40+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxbolxvu2e...
CVE-2026-60359
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvh7if2v22s...
CVE-2026-60305
creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60218
creationtimestamp| type| source ---|---|--- 2026-07-23 16:48:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrm6ihgfp72c...
CVE-2026-47063
creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65696
Overseerr
EUVD-2026-48309
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
CVE-2026-15612
Logto bypasses OIDC nonce validation when the nonce claim is absent from the idtoken, enabling replay of authentication tokens and weakening session-binding...
CVE-2026-65690
creationtimestamp| type| source ---|---|--- 2026-07-23 16:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrd7i7vtym2l 2026-07-30 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrupqhcjik2c...
MINI-26JW-4VGX-P8H8
Bulletin has no description...
MINI-XH7F-69C6-8C4C
Bulletin has no description...
MINI-7898-HF76-639X
Bulletin has no description...
MINI-3RJG-2W9Q-72P4
Bulletin has no description...