62178 matches found
CVE-2026-28370
creationtimestamp| type| source ---|---|--- 2026-02-27 05:20:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmajhfh2d 2026-02-27 05:20:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmz252f2s 2026-02-27 06:58:30+00:00| seen|...
CVE-2026-27578
n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject arbitrary scripts into pages rendered by the n8n application using different techniques on various nodes Form Trigger...
GHSA-PHWV-C562-GVMH
creationtimestamp| type| source ---|---|--- 2026-02-27 04:10:19+00:00| seen| https://gist.github.com/alon710/bd389c3761f00f62851a6d5cd2e46410...
CVE-2026-27942
creationtimestamp| type| source ---|---|--- 2026-02-27 03:40:19+00:00| seen| https://gist.github.com/alon710/a27d67a44ac5804fb1959c01e9c562d6 2026-02-27 12:00:53+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnymvk462u 2026-02-28 10:10:32+00:00| seen|...
GHSA-62CR-6WP5-Q43H
creationtimestamp| type| source ---|---|--- 2026-02-27 03:10:18+00:00| seen| https://gist.github.com/alon710/5a2e5affef6dd7e5863b811b8e50c918...
GHSA-7GCC-R8M5-44QM
creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79...
GHSA-JH8H-6C9Q-7GMW
creationtimestamp| type| source ---|---|--- 2026-02-27 01:40:18+00:00| seen| https://gist.github.com/alon710/c0095b0ad4a6fd43c1592021bdf2e7f5 2026-02-27 01:54:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfsm4ebfwr2b...
GHSA-38C7-23HJ-2WGQ
creationtimestamp| type| source ---|---|--- 2026-02-27 00:40:19+00:00| seen| https://gist.github.com/alon710/2b47423cec6eddc2fceeb701acd589b2...
GHSA-GJ6X-Q8RH-WJ6X
creationtimestamp| type| source ---|---|--- 2026-02-27 00:10:19+00:00| seen| https://gist.github.com/alon710/8f17f9c15768fb9e715dace4af33516b...
PT-2026-22389
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.0.18 Description The WebAuthn prepare endpoint, /api/webauthn/prepare, in versions prior to 4.0.18 lacks authentication, CSRF protection, captcha, or configuration checks. This allows unauthenticated attackers to...
phpMyFAQ 安全漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system developed by Thorsten Rinne. Versions of phpMyFAQ prior to 4.0.18 contained security vulnerabilities. These vulnerabilities stemmed from the WebAuthn prepare endpoint, which lacked authentication and CSRF protection, allowing unverified...
CVE-2026-27836: Missing Authorization
phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, captcha, or configuration checks. This allows unauthenticated attackers to create unlimited us...
PT-2026-22312
Name of the Vulnerable Software and Affected Versions rubyipmi affected versions not specified Description A flaw exists in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker possessing host creation or update permissions can...
CVE-2019-25458
creationtimestamp| type| source ---|---|--- 2026-02-26 23:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsdibxcxg23...
GHSA-8G8J-R87H-P36X
creationtimestamp| type| source ---|---|--- 2026-02-26 23:10:18+00:00| seen| https://gist.github.com/alon710/698e47d7e7b029f09315d51259967445...
CVE-2026-27151
creationtimestamp| type| source ---|---|--- 2026-02-26 22:57:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsca2spa22n...
GHSA-VJF3-2GPJ-233V n8n has an SSO Enforcement Bypass in its Self-Service Settings API
Impact An authenticated user signed in through Single Sign-On SSO could disable SSO enforcement for their own account through the n8n API. This allowed the user to create a local password and authenticate directly with email and password, completely bypassing the organization's SSO policy,...
n8n has an SSO Enforcement Bypass in its Self-Service Settings API
Impact An authenticated user signed in through Single Sign-On SSO could disable SSO enforcement for their own account through the n8n API. This allowed the user to create a local password and authenticate directly with email and password, completely bypassing the organization's SSO policy,...