CVE-2026-1213

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...

CVE-2026-1213 Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2...

CVE-2026-1213

CVE-2026-1213 affects askbot up to version 0.12.2, where an attacker authenticated with normal user permissions can modify other users’ profile pictures due to inexhaustive permissions checks. Red Hat, OSV-GHSA entries, and related advisories corroborate the issue as an IDOR-like permission flaw ...

CVE-2026-24536

creationtimestamp| type| source ---|---|--- 2026-01-27 12:46:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfs3q6yqz23...

Incorrect Privilege Assignment

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the Admin API. An attacker can access sensitive user attributes ...

CVE-2026-24823

creationtimestamp| type| source ---|---|--- 2026-01-27 12:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfqnsp5rj2c...

CVE-2026-24398

creationtimestamp| type| source ---|---|--- 2026-01-27 12:03:27+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mdfponkprd2e...

CVE-2025-14988

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-01 2026-01-27 21:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgqg76iux2t 2026-01-29 05:21:33+00:00| seen|...

CVE-2025-12386

creationtimestamp| type| source ---|---|--- 2026-01-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/01/CVE-2025-12386/ 2026-01-27 17:09:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgashm3qz2c...

CVE-2026-24828

creationtimestamp| type| source ---|---|--- 2026-01-27 10:27:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkdbosyw2m...

CVE-2026-24819

creationtimestamp| type| source ---|---|--- 2026-01-27 10:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfiyu7zxu2m...

CVE-2026-24814

creationtimestamp| type| source ---|---|--- 2026-01-27 09:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhnetjtz2c...

CVE-2026-24816

creationtimestamp| type| source ---|---|--- 2026-01-27 09:35:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhgnwjwc2h...

CVE-2026-24813

creationtimestamp| type| source ---|---|--- 2026-01-27 09:32:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdfhaoueyg2m...

CVE-2026-1424

A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

CVE-2026-24806

creationtimestamp| type| source ---|---|--- 2026-01-27 09:10:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdffzx5ew32h...

CVE-2026-24808

creationtimestamp| type| source ---|---|--- 2026-01-27 09:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdffxaypez26...

CVE-2026-23881

creationtimestamp| type| source ---|---|--- 2026-01-27 06:26:34+00:00| published-proof-of-concept| https://github.com/kyverno/kyverno/security/advisories/GHSA-r2rj-wwm5-x6mq 2026-01-27 18:02:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgdri5yjh22...

CVE-2026-24479

creationtimestamp| type| source ---|---|--- 2026-01-27 03:47:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdetxesql32i 2026-09-08 06:48:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hustojproblemimportrce.rb...

CVE-2026-24477

creationtimestamp| type| source ---|---|--- 2026-01-27 03:32:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdet5sfbzm2n 2026-01-29 02:12:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdjpm6pwfj2a 2026-03-17 06:30:09+00:00| confirmed|...