72394 matches found
CVE-2026-12565
creationtimestamp| type| source ---|---|--- 2026-06-18 17:11:50+00:00| seen| https://gist.github.com/alon710/8812bad8b22fe18c159a9af87742e425...
CVE-2026-12566
creationtimestamp| type| source ---|---|--- 2026-06-18 16:41:21+00:00| seen| https://gist.github.com/alon710/d4f4b73b0a184d9eef118aa0970357bf...
EUVD-2026-37912
The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS expose sensitive account information through the 'update-profile/' API endpoint. A remote, unauthenticated attacker can submit a reque...
CVE-2026-54105
The CVE concerns CVE-2026-54105 affecting the GAO EPDS and CBCA EDS systems. The vulnerability arises from the update-profile/ API endpoint, where a remote, unauthenticated attacker can supply an arbitrary user_id and receive a JSON response containing account-specific information, including the ...
CVE-2026-54104
The CVE-2026-54104 entry covers a privilege escalation flaw in the U.S. GAO EPDS and CBCA EDS client authentication flow. The systems trust client-provided values for the epds_role_id parameter without verification, enabling a remote, authenticated attacker to raise their privileges. Affected com...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation via the agentid metadata in the gRPC communication process. An attacker can impersonate other agents on the same server by injecting a forged value into outgoing metadata, leading to unauthorized cross-tenant actions...
ECHO-1E6E-2E1A-3941
Bulletin has no description...
ECHO-9581-AFF6-F7DB
Bulletin has no description...
MINI-MMVX-RM89-M3J8
Bulletin has no description...
MINI-2R3G-QFJ3-33RJ
Bulletin has no description...
MINI-JRHV-X772-WW7Q
Bulletin has no description...
ECHO-B826-4D3A-4F4E
Bulletin has no description...
ECHO-9157-E0CB-829D
Bulletin has no description...
CVE-2026-50141
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged agentid value into outgoing gRPC metadata. The server correctl...
MINI-9VPR-FR5R-5M7X
Bulletin has no description...
Information Exposure
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
MINI-WWPR-RV7M-7738
Bulletin has no description...
GHSA-47QP-HQVX-6R3F
creationtimestamp| type| source ---|---|--- 2026-06-18 13:41:25+00:00| seen| https://gist.github.com/alon710/adfa7aacc3b80320d7d38d47591141d2 2026-06-18 14:01:20+00:00| seen| https://gist.github.com/alon710/1009ff77420ca2d3dfc49ca0eb601808...