72615 matches found
GHSA-777C-7FJR-54VF
creationtimestamp| type| source ---|---|--- 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205dac4...
EUVD-2026-36552
A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before saving the submitted data. In CakePHP, supplying a primary key in the save data can cause a create followed by save...
Security Bulletin: Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
Summary IBM Langflow Desktop contains a vulnerability in its image retrieval functionality where the GET /api/v1/files/images/flowid/filename endpoint fails to enforce authentication and ownership validation, allowing any unauthenticated user to access image files by supplying a valid flow...
GHSA-45QJ-4XQ3-3C45
creationtimestamp| type| source ---|---|--- 2026-06-12 18:22:18+00:00| seen| https://gist.github.com/sandh0t/45fdee24a7907e0cd836aed26f2d5a7a...
EUVD-2026-36533
The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbitrary caller-supplied account identifier, without validating any ownership relationship. Each call mints a new sequential device identifier and returns the current high-water...
CVE-2026-42932 Naxclow IoT Platform Generation of Predictable Numbers or Identifiers
Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endpoint that reveals the current identifier high-water mark, the active fleet can be enumerated...
CVE-2026-48006
creationtimestamp| type| source ---|---|--- 2026-06-12 18:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dkybdiu2q 2026-06-15 02:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sby6di2n 2026-07-10 15:58:20+00:00| seen|...
CVE-2026-53982
Cap-go Console 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by triggering account deletion while a device identifier is linked to the active session. The platform incorrectly associates the...
MINI-CG89-VH7H-V25H
Bulletin has no description...
MINI-XRR2-G973-33Q6
Bulletin has no description...
MINI-77VX-JX8W-X5F7
Bulletin has no description...
MINI-5JRG-5H5V-WJV7
Bulletin has no description...
MINI-M834-WGWF-VQM5
Bulletin has no description...
MINI-4858-RR3G-GVHM
Bulletin has no description...
MINI-RC43-JG5M-R99V
Bulletin has no description...
MINI-4XG5-G9MW-JMRW
Bulletin has no description...
MINI-746J-WPXJ-R84X
Bulletin has no description...
MINI-XVVV-2R2Q-388X
Bulletin has no description...