72070 matches found
GHSA-PJP7-Q6WP-97QX
creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...
CVE-2026-51278
creationtimestamp| type| source ---|---|--- 2026-08-01 01:47:41+00:00| seen| https://gist.github.com/programmervuln/775a517ba93b83b4a76bd1fd2193ed82...
MINI-H4JH-MHP6-335P
Bulletin has no description...
MINI-66JM-6367-W4R7
Bulletin has no description...
GHSA-3WHF-VGF2-9W6G
creationtimestamp| type| source ---|---|--- 2026-07-31 20:31:22+00:00| seen| https://gist.github.com/alon710/124f7bf887e5079fb15a66958a9543ef...
GHSA-45HQ-CXWH-F6VC vulnerabilities
Vulnerabilities for packages: superset, mlflow...
MINI-5FM3-9PX3-C9GP
Bulletin has no description...
MINI-PQ5X-FJCQ-X829
Bulletin has no description...
MINI-G6WC-WCJV-W3QH
Bulletin has no description...
CVE-2026-54707
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...
CGA-PFX4-JF95-7W88
Bulletin has no description...
hashi-vault-js has a path traversal and query parameter injection
Summary The hashi-vault-js library is vulnerable to path traversal and query string injection due to the lack of proper encoding of identifiers in path segments and query strings. This allows attackers to manipulate the request URL and potentially access unintended downstream endpoints or inject...
CVE-2026-17566
creationtimestamp| type| source ---|---|--- 2026-07-31 17:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkvuq372u 2026-07-31 17:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqkc5lt2i 2026-08-01 15:04:27+00:00| seen|...
GHSA-RC52-C4HV-W89P Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook
Impact The shop payment webhook POST /locale/update-payment route syliusmollieshoppaymentwebhook accepts two independent, attacker-controlled parameters: id the Mollie payment ID, verified against Mollie's API and orderId the Sylius order ID, read directly from the database. The handler never...
CVE-2026-51277
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51249
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-28812
creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcm7hwyh2z...
ECHO-E17F-24A1-917B
Bulletin has no description...