74230 matches found
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-67206
creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...
GHSA-JX74-CQJV-2C67
creationtimestamp| type| source ---|---|--- 2026-07-30 20:33:08+00:00| seen| https://gist.github.com/alon710/c5ece1b4b71f33d4bb332d0422fd7596...
CVE-2026-68500 Sylius Mollie Plugin: Payment status forgery via the payment webhook
Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /locale/update-payment payment webhook accepts attacker-controlled id and orderId parameters but does not verify that the Mollie payment belongs to the...
CVE-2026-67528
creationtimestamp| type| source ---|---|--- 2026-07-30 20:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/agxcrs77lkn5n...
CVE-2026-64870
creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtesop7dg2u...
CVE-2026-61536
creationtimestamp| type| source ---|---|--- 2026-07-30 19:54:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijlhn7uk5lbef 2026-07-30 20:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva5o4eg52q...
MINI-W92F-PWWW-5FQJ
Bulletin has no description...
CVE-2026-18245
creationtimestamp| type| source ---|---|--- 2026-07-30 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv4y6hato2z 2026-07-30 19:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bovzhqup4waot 2026-07-30 20:01:52+00:00| seen|...
CGA-XPH9-4FX8-Q5VP
Bulletin has no description...
CGA-6QW2-6F54-8CHH
Bulletin has no description...
CGA-9352-9QF4-8P95
Bulletin has no description...
CGA-WH2C-RF79-VFP8
Bulletin has no description...
CVE-2026-51261
creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv476gfh42k...
CVE-2026-67174
creationtimestamp| type| source ---|---|--- 2026-07-30 17:48:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruyqccvhz2e...
SUSE CVE-2026-28736
UNSUPPORTED WHEN ASSIGNED Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's fileID to read the content of the file. NOTE: Focalboard as a standalone product is not maintained and no fix will be issued...
SUSE CVE-2026-34762
Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/imsi API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber's polic...
SUSE CVE-2026-35598
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV GetResource and GetResourcesByList methods fetch tasks by UID from the database without verifying that the authenticated user has access to the task's project. Any authenticated CalDAV user who knows or...
SUSE CVE-2026-40077
Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept a user-supplied system ID and proceed without further checks that the user should have access to that system. As a result, any authenticated user can access these routes for any system if they kno...