ECHO-5DA5-33DB-F402

Bulletin has no description...

A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications

Authorization violations under valid Web sessions are difficult to identify and handle in real time from traffic because they depend strongly on business semantics and exhibit few distinctive protocol-level features. This paper proposes a non-intrusive traffic analysis framework for authorization...

CVE-2026-54490

creationtimestamp| type| source ---|---|--- 2026-07-17 23:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqux4fm3a62g...

CVE-2026-54244

creationtimestamp| type| source ---|---|--- 2026-07-17 23:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwsujrnt22...

CVE-2026-48373

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116937701968691999 2026-07-18 12:08:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwa5ft6db2d 2026-07-18 12:08:28+00:00| seen|...

CVE-2026-55177

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:03+00:00| published-proof-of-concept| https://github.com/dfpc-coe/CloudTAK/security/advisories/GHSA-r95q-fp26-h3hc...

CVE-2026-50271

creationtimestamp| type| source ---|---|--- 2026-07-17 22:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsxhwxz2l...

GHSA-FF9F-JF42-662Q

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-20 13:00:41+00:00| seen| https://www.cert.at/de/warnungen/2026/7/kritische-sicherheitslucken-in-wordpress-updates-verfugbar 2026-07-20...

CVE-2026-48045

creationtimestamp| type| source ---|---|--- 2026-07-17 20:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulyhoe352b...

GO-2026-5999 milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery in github.com/milvus-io/milvus

milvus: RBAC grantee-id uses truncated MD5 64-bit, enabling privilege-binding collisions and cross-role privilege forgery in github.com/milvus-io/milvus...

MINI-JM5J-98J2-W5GR

Bulletin has no description...

CVE-2026-43636

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-12691

creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...

CVE-2026-63101

creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...

Authorization Bypass Through User-Controlled Key

Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in lib/mcp/server/transports/streamablehttptransport.rb, which processes tool execution requests to...

CVE-2026-53712 SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...

CVE-2026-9198

creationtimestamp| type| source ---|---|--- 2026-07-17 18:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquedxsgce2v 2026-07-18 20:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jkspbj2f 2026-07-22 16:00:04+00:00| seen|...

CVE-2026-9202

creationtimestamp| type| source ---|---|--- 2026-07-17 18:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqueagavxm2u 2026-07-18 17:01:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwqjem3xu2l 2026-07-18 17:01:24+00:00| seen|...

CVE-2026-51083

creationtimestamp| type| source ---|---|--- 2026-07-17 18:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mque7ahppv2e...

CVE-2026-49212

Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symfony\UX\LiveComponent\LiveComponentHydrator covered only sorted prop key/value pairs and did not include the component name, the slot identifier props vs propsFromParent, or request contex...