50187 matches found
CVE-2026-59828 Discourse: Hidden post revisions leak through adjacent visible diffs
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...
CVE-2026-59828
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...
CVE-2026-59828
CVE-2026-59828 affects the Discourse open‑source discussion platform. Before versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This could di...
CVE-2026-59828 Discourse: Hidden post revisions leak through adjacent visible diffs
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...
EUVD-2026-42737
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0,...
CVE-2026-58143
Cotonti Siena 0.9.26 and earlier are affected by a cross-site request forgery via the admin.php config update endpoint. The vulnerability lets an unauthenticated attacker trick a logged-in administrator into submitting a forged POST request, bypassing CSRF validation. Attackers can disable the PF...
CVE-2026-54004
creationtimestamp| type| source ---|---|--- 2026-07-09 21:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqakhwvc2726...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the erasespamedcomments process. An attacker can permanently delete arbitrary wiki pages, including critical or administrative pages, by sending crafted POST requests containing a suppr array with targeted page...
CVE-2026-55590
creationtimestamp| type| source ---|---|--- 2026-07-09 20:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaj36nun627 2026-07-13 23:27:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktqzssjo27...
CVE-2026-59148
creationtimestamp| type| source ---|---|--- 2026-07-09 20:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaibfx7pc24 2026-09-12 00:32:03+00:00| seen| https://gist.github.com/alon710/12e5af59440fe17bf499cbab29b7b498 2026-09-12 00:35:05+00:00| published-proof-of-concept|...
CVE-2026-58198
creationtimestamp| type| source ---|---|--- 2026-07-09 20:16:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaha72ila2w...
CVE-2026-50188
creationtimestamp| type| source ---|---|--- 2026-07-09 20:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqagfdjqyh2q...
CVE-2026-59726
creationtimestamp| type| source ---|---|--- 2026-07-09 18:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqab2vcb5g2b 2026-07-09 19:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqae3c4udu2x 2026-07-29 13:13:55+00:00| seen|...
CVE-2026-11875
creationtimestamp| type| source ---|---|--- 2026-07-09 17:33:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa642jpjz2e...
MAL-2026-10086 Malicious code in dl-pp-latm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f1adb71c41838848c4d4292830a9738895d32a5b0f1f098e1efdadb233716 Package [email protected] registers both preinstall and postinstall lifecycle hooks that run index.js, which collects installer machine identifiers —...
CVE-2026-54801
creationtimestamp| type| source ---|---|--- 2026-07-09 16:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3tocizy2x 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-14 12:45:03+00:00| seen|...
CVE-2026-54799
creationtimestamp| type| source ---|---|--- 2026-07-09 16:42:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3brethk24 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-16 16:15:05+00:00| seen|...
CVE-2026-59207
creationtimestamp| type| source ---|---|--- 2026-07-09 16:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zibfybn25...