68316 matches found
CVE-2026-60363
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:40+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxbolxvu2e...
CVE-2026-60359
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvh7if2v22s...
CVE-2026-60305
creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60218
creationtimestamp| type| source ---|---|--- 2026-07-23 16:48:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrm6ihgfp72c...
CVE-2026-47063
creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
EUVD-2026-48309
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
CVE-2026-65696
Overseerr
CVE-2026-15612
Logto bypasses OIDC nonce validation when the nonce claim is absent from the idtoken, enabling replay of authentication tokens and weakening session-binding...
CVE-2026-65690
creationtimestamp| type| source ---|---|--- 2026-07-23 16:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrd7i7vtym2l 2026-07-30 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrupqhcjik2c...
MINI-26JW-4VGX-P8H8
Bulletin has no description...
MINI-XH7F-69C6-8C4C
Bulletin has no description...
MINI-7898-HF76-639X
Bulletin has no description...
MINI-3RJG-2W9Q-72P4
Bulletin has no description...
MINI-VJ3G-6W86-7JV2
Bulletin has no description...
MINI-4XF7-55RF-8R29
Bulletin has no description...
MINI-J663-HXX7-9VGQ
Bulletin has no description...
CVE-2026-59544
creationtimestamp| type| source ---|---|--- 2026-07-23 13:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvlzdlq22s...
CVE-2026-47050
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
PYSEC-2026-3482 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...