74237 matches found
PT-2026-66382
The Easy Appointments WordPress plugin through 3.12.26 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an identifier...
CVE-2026-16339
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-69945
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...
CVE-2026-13308
creationtimestamp| type| source ---|---|--- 2026-07-29 22:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswe6mtbk2j...
CVE-2026-54249
Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter such as the Vercel AI adapter can reference arbitrary files in the application's...
CVE-2026-5490
creationtimestamp| type| source ---|---|--- 2026-07-29 21:07:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstf3bwog24 2026-07-30 05:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnurrc5h2a...
CVE-2026-5487
creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...
CVE-2026-6336
creationtimestamp| type| source ---|---|--- 2026-07-29 21:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrst3p5lsr2e 2026-07-30 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
CVE-2026-67430
creationtimestamp| type| source ---|---|--- 2026-07-29 20:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o 2026-07-30 16:35:25+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh 2026-07-31...
CVE-2026-4672
creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
crun: crun: Privilege escalation due to incorrect parsing of the `--user` option
A flaw was found in crun, an open-source OCI Container Runtime. A local user can exploit this vulnerability due to incorrect parsing of the --user option when using crun exec. The value 1 is misinterpreted as root privileges User ID 0 and Group ID 0 instead of the intended User ID 1 and Group ID ...
CVE-2026-67201
creationtimestamp| type| source ---|---|--- 2026-07-29 20:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspoy6qkg2j...
CVE-2026-67436 Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...
MINI-WJFP-RV4R-J57J
Bulletin has no description...
MINI-XHFQ-HFV7-9G99
Bulletin has no description...
MINI-MW8M-RV98-FJ9R
Bulletin has no description...
MINI-2QP3-C9JM-R5JC
Bulletin has no description...
MINI-2G7M-2GQG-FX56
Bulletin has no description...