19403 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to an incomplete fix in the policy. An attacker can gain unauthorized access to restricted functionality or data by bypassing intended security policies. Remediation A fix was pushed into the master branch bu...
CVE-2026-65971
creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| https://t.me/GithubRedTeam/94876 2026-07-24 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94876 2026-07-24 01:00:03+00:00| seen| Telegram/lPm2d4VYpYEjn3m2EVnzf33SWkbqRmjBxDEhEFxEK5fDURE 2026-07-2...
CVE-2026-65912
creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cjmm-f4jc-qw8r...
CVE-2026-65914
creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h8r8-wccr-v5f2...
CVE-2026-65899
creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vxr8-fq34-vvx9...
CVE-2026-12082 Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)
The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...
CVE-2026-12082
The Praison AI SEO WordPress plugin, in versions prior to 5.0.7 , contains a vulnerability where several REST API routes lack proper authorization checks. This flaw allows unauthenticated users to perform unauthorized actions, specifically modifying the permalink of any published post and accessi...
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2026-11536)
Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to a remote code execution vulnerability. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below. Vulnerability Details...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the libheif/region.cc process. An attacker can trigger out-of-bounds memory access by crafting a HEIF file with large width and height values that cause an integer overflow during buffer allocation...
PT-2026-63528
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket on protocol error in the library lib/facil/http/parsers/websocket parser.h of the component WebSocket Frame Parser. This manipulation of the argument on message causes improper input validation. The attack...
CVE-2026-58442
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:01+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-h2x6-g7q6-344v...
CVE-2026-58445
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:54+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-pgqf-926r-548m...
CVE-2026-54481
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:42+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-94v3-77j7-vm48...
CVE-2026-58420
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:32+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-5ggr-2f2h-jmvm...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the construction of the longname field during SFTP server directory listing. An attacker can cause a crash or execute arbitrary code on the server by supplying specially crafted, excessively long filenames...
CVE-2026-59727
creationtimestamp| type| source ---|---|--- 2026-07-21 00:35:05+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-7pw4-f3q4-r2p2...
CVE-2026-57143
creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:53+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf...