CVE-2026-105138

The Obot platform versions 0.12.0 before 0.26.2 is vulnerable to a credential exposure flaw in the MCP Catalog Entry API . Due to insufficiently protected credentials, authenticated basic users with access to an entry can perform a GET request to /api/all-mcps/entries/{entry_id}. This action allo...

CVE-2026-105138 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2026-105138 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2026-70871

...

CVE-2026-70760

...

CGA-7234-5HJ8-J5Q9

Bulletin has no description...

MINI-99X9-2VH5-6W79

Bulletin has no description...

EDB-50775

creationtimestamp| type| source ---|---|--- 2026-06-30 12:40:27+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/219761c7-3d1a-4eeb-8fc2-e6365b513815...

EDB-48377

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/050710a2-1d62-4ea6-9df0-2c97a1b7c09f...

EDB-31683

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4bf9e8a-7eb0-410a-919f-b54ff909387d...

EDB-43143

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:49+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/95e87a81-e0c6-4a2d-842b-8f3d5558dc91...

CVE-2011-0226

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3e1d012-3d32-4167-9e0d-af5041040ea3 2026-06-23 14:04:10+00:00| exploited|...

CVE-2018-10376

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d9651c-752c-45ff-8daa-b9fbd15ce4a9 2026-06-23 14:04:06+00:00| exploited|...

CVE-2021-3006

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:07+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/41c944c1-58b6-4543-90c0-e512cb5203cb...

CGA-G32C-WC33-X3HF

Bulletin has no description...

MINI-QFPH-MVXP-JCWX

Bulletin has no description...

MINI-62W8-CXQF-GXW9

Bulletin has no description...

CVE-2025-61754

...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-2783link is external Google Chromium Mojo Sandbox Escape Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and...

Unfixed XSS vulnerability at www.teldor.com

Security researcher MaXWeL, has submitted on 05/06/2007 a cross-site-scripting XSS vulnerability affecting www.teldor.com, which at the time of submission ranked 959209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2007. It is currently...