57600 matches found
CVE-2026-56312 Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint
Capgo before 12.128.2 contains an improper validation vulnerability in the acceptinvitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn...
CVE-2026-11990
creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5r4f2p52z 2026-07-10 13:23:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcamqmmvf22 2026-07-11 00:44:17+00:00| seen|...
CVE-2026-14461
creationtimestamp| type| source ---|---|--- 2026-07-10 12:27:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5i5xosi2x 2026-07-10 14:21:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcdud4c3b26 2026-07-10 16:15:07+00:00| seen|...
CVE-2026-51807
creationtimestamp| type| source ---|---|--- 2026-07-10 12:26:14+00:00| seen| https://gist.github.com/5asever40-a11y/dcfa867b099a7782ad72ab7981427765 2026-07-14 23:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfu3brq72t 2026-07-15 15:44:06+00:00| seen|...
CVE-2026-12955
creationtimestamp| type| source ---|---|--- 2026-07-10 12:13:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4oz4s4a2i 2026-07-10 21:13:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2vwd6tv2s...
CVE-2026-9838
creationtimestamp| type| source ---|---|--- 2026-07-10 11:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3sxpap32w 2026-07-10 12:14:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4qmhllr2e...
CVE-2026-15182
creationtimestamp| type| source ---|---|--- 2026-07-10 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqc2t473jw2c...
CVE-2026-56814 Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)
Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allowing an unauthenticated remote attacker to cause denial of service. The parser charges the :length limit only for part...
CVE-2026-40008
creationtimestamp| type| source ---|---|--- 2026-07-10 11:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbyv3qycz22 2026-07-10 12:15:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40008 2026-07-10 13:21:41+00:00| seen|...
CVE-2026-38076
A flaw was found in jbig2dec. An integer overflow vulnerability in the jbig2arithiaidctxnew function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal...
CVE-2026-40008
Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName.newInstance without any validation or allowlisting. This issue affects Apache IoTDB:...
CVE-2026-21045
creationtimestamp| type| source ---|---|--- 2026-07-10 08:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpamuqba27 2026-07-10 09:54:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbux2ewhl2e 2026-07-10 12:46:38+00:00| seen|...
CVE-2026-12685
creationtimestamp| type| source ---|---|--- 2026-07-10 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116894507132740931 2026-07-10 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqbmvjqo2j2d 2026-07-10 08:10:09+00:00| seen|...
CVE-2026-12123
The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.8.5 via the 'vdl' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locatio...
CVE-2026-11818
creationtimestamp| type| source ---|---|--- 2026-07-10 05:39:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgohp3n22f 2026-07-10 20:11:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxgpgezc2y...
CVE-2026-11392
creationtimestamp| type| source ---|---|--- 2026-07-10 05:38:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x 2026-07-10 05:38:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k...
CVE-2026-21053
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
EUVD-2026-42823
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
CVE-2026-21053
CVE-2026-21053 describes an inability to properly validate input in Samsung Email before 6.2.13.1, allowing local attackers to create arbitrary files inside the app sandbox. Affected product/version: Samsung Email prior to 6.2.13.1. Root cause: improper input validation in the application. Impact...