23061 matches found
CVE-2020-28734
creationtimestamp| type| source ---|---|--- 2026-07-07 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3hhejvq42k...
CVE-2021-25150
creationtimestamp| type| source ---|---|--- 2026-07-07 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3frplwgy22...
CVE-2026-55417 Chevereto private profile setting leaks username on /json endpoint
Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML route /username correctly returns 404. However, the /json AJAX listing endpoint does not apply the same check. An...
CVE-2026-55417 Chevereto private profile setting leaks username on /json endpoint
Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML route /username correctly returns 404. However, the /json AJAX listing endpoint does not apply the same check. An...
CVE-2026-55417
Chevereto is a self-hosted media-sharing platform. Starting in version 3.7.5 and prior to version 4.5.4, when a user enables the private profile option, visiting their profile HTML route /username correctly returns 404. However, the /json AJAX listing endpoint does not apply the same check. An...
CVE-2026-55417
Chevereto (self-hosted media sharing) is affected in versions 3.7.5 up to before 4.5.4. The issue is that when a user enables private profile, the HTML route (/username) correctly returns 404, but the /json AJAX listing endpoint does not apply the same privacy check. An unauthenticated caller who...
CVE-2026-23697
creationtimestamp| type| source ---|---|--- 2026-07-07 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3fcys7xx2w 2026-07-10 17:49:13+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mqcphwfowu2j 2026-07-13 22:00:10+00:00| seen|...
CVE-2020-19641
creationtimestamp| type| source ---|---|--- 2026-07-07 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq3e43ccys2n...
CVE-2026-7017
creationtimestamp| type| source ---|---|--- 2026-07-07 19:24:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq3dey2xdb2u 2026-07-07 21:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3jd4b6672e...
CVE-2024-29640
creationtimestamp| type| source ---|---|--- 2026-07-07 18:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3azokbve2h...
CVE-2021-21633
creationtimestamp| type| source ---|---|--- 2026-07-07 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq35firqjh25...
CVE-2026-13019
creationtimestamp| type| source ---|---|--- 2026-07-07 17:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq35do63e62b 2026-07-07 19:48:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3er3vied2z 2026-07-08 12:14:06+00:00| seen|...
PYSEC-2026-1193 askbot inexhaustive permissions check allows any user to modify a different user's profile picture
All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2...
PYSEC-2026-1371 Fickling Blocklist Bypass: cProfile.run()
Fickling's assessment cProfile was added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/dc8ae12966edee27a78fe05c5745171a2b138d43. Original report Description Summary Fickling versions up to and including 0.1.6 do not treat Python's cProfile module as unsafe. Because ...
PYSEC-2026-1355 Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Impact A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of imag...
Security Bulletin: Vulnerabilities in log4j, IBM WebSphere Profile and IBM Semeru Java (CVE-2026-34477, CVE-2026-34480, CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268) affect PowerVM Novalink
Summary The log4j, IBM WebSphere Liberty Profile and IBM Semeru Java are used by PowerVM Novalink. PowerVM Novalink has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-3621 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere...
GO-2026-5826 Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context in github.com/nezhahq/nezha
Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context in github.com/nezhahq/nezha. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...
CVE-2026-11348
creationtimestamp| type| source ---|---|--- 2026-07-07 15:22:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2vue5nff2v...
CVE-2026-27823
creationtimestamp| type| source ---|---|--- 2026-07-07 13:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2op6co7e2i 2026-07-20 17:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3tzaqs2t27...