49573 matches found
CVE-2026-13697
creationtimestamp| type| source ---|---|--- 2026-07-29 16:38:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c 2026-07-29 19:41:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v 2026-08-03 19:23:59+00:00| seen|...
CVE-2026-66724
creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:29+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-66723...
CVE-2026-44944
creationtimestamp| type| source ---|---|--- 2026-07-29 16:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrscy4akv22j...
CVE-2026-67214
creationtimestamp| type| source ---|---|--- 2026-07-29 15:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsawvdqjp2i 2026-08-30 16:07:16+00:00| seen| https://gist.github.com/djlan/64af2b3122819c9bde9c3f0d59538aaa...
CVE-2026-55707
creationtimestamp| type| source ---|---|--- 2026-07-29 15:23:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrsa7nbm4c2x...
GHSA-M8RV-5G2X-5CG5
creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:08+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mleb52m 2026-08-04 11:32:23+00:00| seen| https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f...
GHSA-8XCM-R25X-G524
creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:08+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mvibp2t 2026-08-04 14:32:21+00:00| seen| https://gist.github.com/alon710/51c65a255f770cf34523cbf52ef9595a...
CVE-2026-67215
creationtimestamp| type| source ---|---|--- 2026-07-29 15:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wfpmo72f 2026-07-29 15:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsb4uh6gh2q 2026-08-05 18:07:07+00:00| seen|...
io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
A flaw was found in Netty's HttpPostRequestEncoder, a widely used Java networking library component responsible for constructing multipart HTTP request bodies. The issue arises because user-supplied filenames and field names are directly embedded into Content-Disposition MIME headers without any...
CVE-2026-55995
creationtimestamp| type| source ---|---|--- 2026-07-29 14:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs67t6tkm2q...
CVE-2026-66488
creationtimestamp| type| source ---|---|--- 2026-07-29 14:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs63ot3fr2b...
CVE-2026-65943
creationtimestamp| type| source ---|---|--- 2026-07-29 14:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5uaygbj2x...
CVE-2026-65946
creationtimestamp| type| source ---|---|--- 2026-07-29 14:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5qvduop2x...
CVE-2026-66489
creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5npxyln2q...
CVE-2026-21655
creationtimestamp| type| source ---|---|--- 2026-07-29 14:30:31+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrs5a3ujze2r 2026-08-11 20:10:20+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgbpylkc2z 2026-08-13 08:49:15+00:00| seen|...
CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core
MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...
CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core
MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...
CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core
MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...
CVE-2026-14900
creationtimestamp| type| source ---|---|--- 2026-07-29 12:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwpx4qxr2a 2026-07-29 15:48:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsbldl7nl2q...