72258 matches found
MINI-Q5M4-MM84-2JRX
Bulletin has no description...
EUVD-2026-47934
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...
BELL-CVE-2026-47063
Bulletin has no description...
BELL-CVE-2026-64600
Bulletin has no description...
CVE-2026-7120
creationtimestamp| type| source ---|---|--- 2026-07-23 02:54:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t...
ECHO-9D6E-B01E-B367
Bulletin has no description...
ECHO-FCC4-5D8A-B7AF
Bulletin has no description...
ECHO-FAB7-82CE-9C15
Bulletin has no description...
ECHO-C184-6FD7-AE80
Bulletin has no description...
ECHO-B416-47AD-FA4D
Bulletin has no description...
ECHO-60A1-36C5-6226
Bulletin has no description...
ECHO-860C-916C-177E
Bulletin has no description...
ECHO-C79D-4D79-8029
Bulletin has no description...
ECHO-DE58-3B9A-5F04
Bulletin has no description...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
ECHO-732C-D358-5FEF
Bulletin has no description...
PT-2026-64021
Name of the Vulnerable Software and Affected Versions Logto affected versions not specified Description Logto performs principal lookup without normalizing email and identifier strings. This lack of normalization allows for principal collision, which can lead to unauthorized account access when...
CVE-2026-61246
CVE-2026-61246 affects Oracle Platform Security for Java (Oracle Fusion Middleware) - Centralized Thirdparty Jars. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access and can lead to takeover of Oracle Platform Security for Java. Affected versions are 12.2....
