57424 matches found
CVE-2026-15352
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:39+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-03 2026-07-16 23:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsewl6cyb2e...
CVE-2026-8312
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...
CVE-2026-8085
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gyg37xi2p 2026-07-21 08:59:19+00:00| seen|...
CVE-2026-59860
creationtimestamp| type| source ---|---|--- 2026-07-16 16:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmthsmaf2l 2026-07-24 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrftsuervb2e...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087
Grafana OnCall 1.16.11 is affected by an unauthenticated token-hijack vulnerability via the internal plugin install endpoint. An attacker can POST to the endpoint using hardcoded default stack_id and org_id values to obtain a valid PluginAuthToken, which can be used to authenticate against intern...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
EUVD-2026-44955
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-59866
creationtimestamp| type| source ---|---|--- 2026-07-16 15:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrluxqhxd2c 2026-07-16 16:50:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroxp5a7c2p...
CVE-2026-35147
creationtimestamp| type| source ---|---|--- 2026-07-16 15:05:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrj54hrth22 2026-07-22 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mra6lx5u262s...
CVE-2026-5674
creationtimestamp| type| source ---|---|--- 2026-07-16 14:14:25+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqrgbdys5a2o 2026-07-16 14:25:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930114006202187 2026-07-16 14:49:42+00:00| seen|...
CVE-2016-5192
creationtimestamp| type| source ---|---|--- 2026-07-16 14:00:05+00:00| seen| https://t.me/KaitNews/312 2026-07-17 00:00:51+00:00| seen| https://t.me/KaitNews/312...
CVE-2026-63306
creationtimestamp| type| source ---|---|--- 2026-07-16 13:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrel5f6pq2l 2026-07-16 14:54:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrijfgqcq2h...
CVE-2024-58360
stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increasing denial-of-service risk and compromising service...
CVE-2026-30623
A flaw was found in LiteLLM. This vulnerability allows a remote attacker to execute arbitrary operating system commands on the host where LiteLLM is running. This is possible because the application's MCP server creation functionality processes JSON configurations that can include unvalidated...
CVE-2026-55805
creationtimestamp| type| source ---|---|--- 2026-07-16 13:05:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrcfgib2s2a...
CVE-2026-15916
creationtimestamp| type| source ---|---|--- 2026-07-16 13:05:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrcfgib2s2a...