72226 matches found
GHSA-V8VM-CQH8-Q87Q
creationtimestamp| type| source ---|---|--- 2026-07-28 21:31:27+00:00| seen| https://gist.github.com/alon710/f64be2d49b2d7a1297c03bef66babfa4...
CVE-2026-52888
creationtimestamp| type| source ---|---|--- 2026-07-28 21:31:27+00:00| seen| https://gist.github.com/alon710/f64be2d49b2d7a1297c03bef66babfa4 2026-07-28 22:35:34+00:00| published-proof-of-concept| https://github.com/nocobase/nocobase/security/advisories/GHSA-v8vm-cqh8-q87q...
GHSA-VCC7-RJ3Q-V3R3 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-51267
creationtimestamp| type| source ---|---|--- 2026-07-28 20:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa35kalo2r 2026-07-29 12:02:45+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrruxvmoo42o...
MINI-4X93-JJ2C-VFVF
Bulletin has no description...
MINI-6923-3RRJ-592V
Bulletin has no description...
MINI-89HC-6J8F-3JJG
Bulletin has no description...
MINI-VFFJ-4PJJ-54VJ
Bulletin has no description...
CVE-2026-16498
creationtimestamp| type| source ---|---|--- 2026-07-28 19:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4tetkat23 2026-08-04 14:12:43+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msb6zqym2e2u 2026-08-05 15:00:06+00:00| seen|...
CVE-2026-47768
creationtimestamp| type| source ---|---|--- 2026-07-28 19:17:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4sk2xmp2a...
CVE-2026-51266
creationtimestamp| type| source ---|---|--- 2026-07-28 19:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ptqcxj2z 2026-07-29 08:03:11+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrrhlisiup2n...
CVE-2026-16496
The CVE concerns terraform-mcp-server prior to version 1.1.0, where an authorization bypass in the streamable-HTTP stateful transport mode could allow a user who obtains another user’s MCP session ID to execute tool calls using that user’s Terraform credentials. Affected component: terraform-mcp-...
CVE-2026-16496 terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability,...
SUSE CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-66748
creationtimestamp| type| source ---|---|--- 2026-07-28 17:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6bv23f2w 2026-07-29 01:00:03+00:00| seen| https://t.me/GithubRedTeam/95604 2026-07-29 12:32:03+00:00| seen|...
GHSA-85RG-P3FR-XC2F QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
Impact The relay's reconnect handler forwards every RECONNECTREQUEST to the host without deduplication or a size cap on the pendingReconnects map, unlike the connect flow which guards against this with maxPendingConnections. An unauthenticated attacker who knows a valid session ID can send...
ECHO-8C91-0553-6384
Bulletin has no description...
CVE-2024-57979
creationtimestamp| type| source ---|---|--- 2026-07-28 16:16:22+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
GHSA-8R6W-3QQ5-4P4R Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions
Summary A privilege escalation vulnerability exists in the Wings /upload/file endpoint due to insufficient validation of panel-signed JWTs. Wings accepts any valid panel-signed JWT containing serveruuid, useruuid, and uniqueid, regardless of the token’s intended purpose. Because the Panel issues...