59024 matches found
CVE-2026-48109
creationtimestamp| type| source ---|---|--- 2026-06-23 00:26:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5avfblh2o 2026-07-20 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2olcg7es2s 2026-07-22 14:54:29+00:00| seen|...
CVE-2026-53923
creationtimestamp| type| source ---|---|--- 2026-06-23 00:15:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4o6qwhh26...
PT-2026-51643
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.0 Description An authenticated user with users.create permission can assign administrative privileges to a new account. This occurs because the store function in app/Http/Controllers/Users/UsersController.php...
PT-2026-51584
Name of the Vulnerable Software and Affected Versions FOSSBilling versions 0.6.21 through 0.7.2 Description An Insecure Direct Object Reference IDOR exists in the support ticket creation workflow. An authenticated client can create a support ticket that references an order belonging to another...
CVE-2026-50555
creationtimestamp| type| source ---|---|--- 2026-06-22 23:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow2l7isc52j 2026-07-13 07:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqj6o5bwlg2d...
CVE-2026-50556
creationtimestamp| type| source ---|---|--- 2026-06-22 23:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzuf2ets2s 2026-07-04 04:07:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6rfuwao2b 2026-07-13 08:07:07+00:00| seen|...
CVE-2026-50170
creationtimestamp| type| source ---|---|--- 2026-06-22 23:21:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzngi3qy2j...
CVE-2026-56348
creationtimestamp| type| source ---|---|--- 2026-06-22 23:01:55+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movykjgn3v2m 2026-06-22 23:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow37lsgda2w...
openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation
A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...
GHSA-X93Q-X9PC-W5HW Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the ticket creation process. An attacker can gain unauthorized access to reference services belonging to other users by manipulating the service ID parameter in the request. Remediation Upgrade paymenter/payment...
postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
A flaw was found in PostgreSQL CREATE TYPE handling for multirange types. The database failed to properly verify schema CREATE privileges during multirange type creation. An authenticated database user could exploit this issue to hijack queries that rely on searchpath resolution for user-defined ...
CVE-2026-12249
creationtimestamp| type| source ---|---|--- 2026-06-22 19:32:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movmu4ylmw2q 2026-06-23 16:29:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116800366330235493...
Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers
Summary When ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. Any remote attacker who can reach the Gogs service can for...
CVE-2026-8074
creationtimestamp| type| source ---|---|--- 2026-06-22 16:48:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdpagmtf22...
CVE-2026-28381
creationtimestamp| type| source ---|---|--- 2026-06-22 16:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdgbwzk622 2026-06-22 17:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3movepagixn2c 2026-06-22 22:26:13+00:00| seen|...
CVE-2026-7664
creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/116794708120532850 2026-06-22 16:30:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3movco74w352g 2026-06-22 19:19:43+00:00| seen|...
CVE-2026-52725
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/core package allows bypassing script-execution restrictions during dynamic component...