44523 matches found
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
CVE-2026-79576
creationtimestamp| type| source ---|---|--- 2026-09-08 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzghqtpgw2j 2026-09-08 18:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmiuejgl2g 2026-09-08 18:08:34+00:00| seen|...
CVE-2026-86724
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...
CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
CVE-2026-82060
CVE-2026-82060 is an insufficient validation flaw in MongoDB Server affecting sharded collections. During document insertion, shard key values were not properly validated, allowing authenticated users to store operator-shaped objects as shard key values. When change stream events for such documen...
Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
CVE-2026-73311
creationtimestamp| type| source ---|---|--- 2026-09-08 16:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfr5434c2f 2026-09-09 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv2gczyd5i24 2026-09-12 08:07:07+00:00| seen|...
CVE-2026-84282
creationtimestamp| type| source ---|---|--- 2026-09-08 15:19:13+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzd2wcck52m...
CVE-2026-79577
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...
CVE-2026-86724
AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a cross-site request forgery (CSRF) vulnerability in plugin/YPTWallet/view/saveBalance.php . The flaw arises because the endpoint relies solely on session cookies without token validation , allowing an attacker to craft a m...
CVE-2026-33389
creationtimestamp| type| source ---|---|--- 2026-09-08 15:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzc2inl772m...
CVE-2026-73316
creationtimestamp| type| source ---|---|--- 2026-09-08 15:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzc2b2br22r 2026-09-12 15:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdfwmkf6f2k 2026-09-12 15:37:09+00:00| seen|...
CVE-2026-78127
creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...
CVE-2026-78134
creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-16 08:02:12+00:00| seen|...
CVE-2026-8044
creationtimestamp| type| source ---|---|--- 2026-09-08 13:30:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4y5gzph2t 2026-09-08 16:45:04+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:16:50+00:00| seen|...
CVE-2026-75021
creationtimestamp| type| source ---|---|--- 2026-09-08 12:53:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muz2vr5bhk2d 2026-09-08 13:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muz6n67cso22 2026-09-08 14:10:44+00:00| seen|...
CVE-2026-71376
creationtimestamp| type| source ---|---|--- 2026-09-08 10:08:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyro5sxdc24 2026-09-08 17:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkwrtbhw2b...