GHSA-7P8G-6C6G-H9W7 praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR

Summary Type: Insecure Direct Object Reference. The agent CRUD endpoints GET / PATCH / DELETE /workspaces/workspaceid/agents/agentid gate access on requireworkspacememberworkspaceid only, then resolve agentid through AgentService.getagentid which is a primary-key lookup with no workspace...

CGA-H9HR-F9HH-GPGM

Bulletin has no description...

CGA-XRVF-XPHG-RCHH

Bulletin has no description...

CGA-MPQ5-9468-45Q5

Bulletin has no description...

CGA-RC5J-VFH9-W8M9

Bulletin has no description...

CGA-V848-M7GC-QG3F

Bulletin has no description...

CGA-9332-MFG7-C446

Bulletin has no description...

CGA-MPQV-9RCG-5F2M

Bulletin has no description...

CGA-HR99-F8JG-2V2V

Bulletin has no description...

CGA-9R8F-QFX2-R24X

Bulletin has no description...

CGA-3W32-F3FW-WVWF

Bulletin has no description...

ECHO-A1E4-1C3C-5A65

Bulletin has no description...

WordPress MapPress Maps for WordPress plugin <= 2.96.6 - Unauthenticated Insecure Direct Object Reference vulnerability

Unauthenticated Insecure Direct Object Reference vulnerability discovered by Kitch - KitchGlobal in WordPress Plugin MapPress Maps for WordPress versions = 2.96.6...

WordPress Klamra Paycal for Aspaclaria plugin <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by KEVIN LEE crattack - OPCIA in WordPress Plugin Klamra Paycal for Aspaclaria versions = 1.1.4...

Chromium: CVE-2026-11017 Inappropriate implementation in Link Preview

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11251

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11221

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-10933

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

MINI-H557-QM27-G979

Bulletin has no description...

MINI-RG36-CXVJ-77G4

Bulletin has no description...