44529 matches found
CVE-2026-86590: Server-Side Request Forgery (SSRF)
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...
CVE-2026-79577
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...
CVE-2026-79577
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...
CVE-2026-79577: Improper Access Control
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if t...
CVE-2026-86482
creationtimestamp| type| source ---|---|--- 2026-09-07 22:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxj5f3cc523...
CVE-2026-86436 Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if t...
CVE-2026-86436 Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if t...
CVE-2026-86299
creationtimestamp| type| source ---|---|--- 2026-09-07 19:11:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mux7m32cvv23 2026-09-08 12:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muz26eb7rz2n...
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge...
CVE-2026-86478
creationtimestamp| type| source ---|---|--- 2026-09-07 18:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mux3z4eb5a25 2026-09-07 19:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117231296587754066 2026-09-07 19:00:28+00:00| seen|...
CVE-2026-86492
creationtimestamp| type| source ---|---|--- 2026-09-07 18:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3o2cahp23...
CVE-2026-86498
creationtimestamp| type| source ---|---|--- 2026-09-07 18:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3mfgwga2w...
CVE-2026-86505
creationtimestamp| type| source ---|---|--- 2026-09-07 17:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gwizb77gbqoeq...
CVE-2026-80172
creationtimestamp| type| source ---|---|--- 2026-09-07 16:36:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muwwvwr7q52n 2026-09-08 04:49:02+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3muy7u43qci2k 2026-09-09 12:00:26+00:00| seen|...
CVE-2026-61410
creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwol6vqjw2j 2026-09-08 12:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muz2qaonyk2n 2026-09-12 05:07:08+00:00| seen|...
CVE-2026-86428
creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwoge4zw72s 2026-09-12 18:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdpyildpp2c...
CVE-2026-86452
creationtimestamp| type| source ---|---|--- 2026-09-07 13:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ji3cndbjq65jp 2026-09-12 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdoctjdhs24...