ECHO-D087-E069-12CE

Bulletin has no description...

ECHO-D227-33D7-30BD

Bulletin has no description...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...

CVE-2026-12583

creationtimestamp| type| source ---|---|--- 2026-07-14 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116917156404370712 2026-07-14 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqlora4oen23 2026-07-14 09:25:26+00:00| seen|...

CVE-2026-15675

A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be...

CVE-2026-15675 code-projects Online Job Portal EditUser.php sql injection

A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be...

CVE-2026-60103

creationtimestamp| type| source ---|---|--- 2026-07-14 03:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcy6xwtb26 2026-07-16 08:21:44+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqskp7enn2q...

CVE-2026-57855

creationtimestamp| type| source ---|---|--- 2026-07-14 02:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6pslbe62e...

CVE-2026-52824

creationtimestamp| type| source ---|---|--- 2026-07-14 01:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mql3xosge422 2026-07-20 01:02:25+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mr23usnfrn2g 2026-07-20 06:02:39+00:00| seen|...

GHSA-GW94-85M2-X8V2

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3258 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3258...

CVE-2026-56099

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3260 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3260 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/187721 2026-09-02 01:00:21+00:00|...

GHSA-4J6X-2764-M8GH

creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3289 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3289...

CVE-2026-44747

creationtimestamp| type| source ---|---|--- 2026-07-14 00:54:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r 2026-07-14 02:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x 2026-07-14 03:00:30+00:00| seen|...

GHSA-8F6J-263M-G72X

creationtimestamp| type| source ---|---|--- 2026-07-14 00:41:43+00:00| seen| https://gist.github.com/alon710/0adc313573f186411d15e2bc7c96b8d7...

EUVD-2026-43574

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hvexts. When building the extension hash via extensions, extensionsbylongname, extensionsbyoid, or hasextensionoid, the code passes OBJobj2txt's return value as the hash-key...

EUVD-2026-43573

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER value fails to parse. basicC, ia5string, and authatt dereference its result without a NULL check. keyiddata also dereferences akid-keyid,...

EUVD-2026-43551

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

ECHO-A73B-1767-0D7F

Bulletin has no description...

PT-2026-58935

Impact The web handler renderMobileBundle internal/web/handlers.go:1325 passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build internal/mobilebundle/builder.go:54, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build never calls...

PT-2026-58674

Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the secure messages deletion endpoint allows an authenticated user to delete messages belonging to other users. This is achieved...