CVE-2025-14001

creationtimestamp| type| source ---|---|--- 2026-01-13 13:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mccplq7p2f2m...

BIT-VIRTUALENV-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

Exploit for CVE-2026-22804

Termix Stored XSS PoC GHSA-m3cv-5hgp-hv35 This repository c...

CVE-2025-66176

creationtimestamp| type| source ---|---|--- 2026-01-13 03:54:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbnu6sx4u2u 2026-01-13 04:00:34+00:00| seen| Telegram/UkQy5p66ZqtUntQbyuL7Mmw6MfrjmrDI9c523Bq1eF22IU 2026-01-13 06:26:45+00:00| seen|...

CVE-2026-22789

creationtimestamp| type| source ---|---|--- 2026-01-13 01:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbfupthhr2c...

CVE-2026-0511

The CVE-2026-0511 issue affects SAP Fiori App Intercompany Balance Reconciliation. The vulnerability is due to missing authorization checks for an authenticated user, enabling privilege escalation. Impact is high on confidentiality and integrity; availability is not affected. The issue is corrobo...

CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

CVE-2026-0496 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file including script files without proper file format validation. This has low impact on confidentiality, integrity and availability of the application...

CVE-2026-0495

CVE-2026-0495 affects SAP Fiori App Intercompany Balance Reconciliation. A high-privilege attacker can cause the application to send uploaded files to arbitrary email addresses, enabling phishing campaigns. Impact on confidentiality, integrity and availability is described as low. The provided do...

CVE-2026-0493

CVE-2026-0493 describes a Cross-Site Request Forgery in the SAP Fiori App Intercompany Balance Reconciliation. The issue could allow an attacker to trigger state-changing actions on behalf of an authenticated user by using an inappropriate request type, with low impact on integrity and no impact ...

CVE-2026-0493 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

SUSE CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which arises from the ability to access restricted information under certain conditions, causing a low impact on...

PT-2026-2343

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The SAP Fiori App Intercompany Balance Reconciliation does not implement proper authorization checks for authenticated users, potentially allowing fo...

SAP Fiori App Intercompany Balance Reconciliation 跨站请求伪造漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A cross-site request forgery vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which originates from a cross-site request forgery and could allow an attacker to perform a state...

CONTPAQi AdminPAQ 代码问题漏洞

CONTPAQi AdminPAQ is an administrative software from CONTPAQi, Mexico. A code issue vulnerability exists in CONTPAQi AdminPAQ version 14.0.0, which stems from the presence of unquoted service paths to the AppKeyLicenseServer service, which could allow an attacker to execute arbitrary code with...

PT-2026-2332

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The application allows an attacker with high privileges to upload any file, including script files, without proper file format validation. This has a...

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation that stems from a failure to perform required authorization checks on authenticated users, which could result in...

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which originates from an elevated-privilege attacker being able to send an uploaded file to an arbitrary email, whi...

PT-2026-2342

Name of the Vulnerable Software and Affected Versions NetWeaver Application Server for Java NW AS Java affected versions not specified Description The User Management Engine UME within the software uses an outdated cryptographic algorithm to encrypt User Mapping data. This could allow an attacker...