26835 matches found
CVE-2026-86341
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:06+00:00| seen|...
CVE-2026-82215 WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
ROOT-APP-NPM-CVE-2026-33228 CVE-2026-33228 in flatted - Patched by Root
Root has patched CVE-2026-33228 in the flatted package for Root:npm. Multiple fixed versions available...
CVE-2026-9667
creationtimestamp| type| source ---|---|--- 2026-09-11 00:25:25+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117249561400617531...
CVE-2026-82215: Insufficient Verification of Data Authenticity
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
CVE-2026-89629: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...
CVE-2026-75742
creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y42nfdx2z...
CVE-2026-88937
creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/achufej3w2s5g 2026-09-11 05:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkel43c2y...
CVE-2026-57967
creationtimestamp| type| source ---|---|--- 2026-09-10 16:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6ijiaeeq25 2026-09-10 17:27:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117247918870489818 2026-09-17 05:37:06+00:00| seen|...
CVE-2026-38058
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01...
CVE-2026-73788
creationtimestamp| type| source ---|---|--- 2026-09-10 16:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f...
CVE-2026-36433
creationtimestamp| type| source ---|---|--- 2026-09-10 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6fpy6fdq2y...
GO-2026-6414 SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers in github.com/siyuan-note/siyuan/kernel...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-78679 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-78679 Source advisory: OSV:PYSEC-2026-3837...
WsgiDAV MySQL provider has a blind SQL injection
SummaryThe sample MySQLBrowserProvider builds its SQL queries by concatenating strings, and the record key from the request URL goes straight into the WHERE clause with no escaping. Any user who can reach a share backed by this provider can inject SQL through the URL. Since these read shares are...
PYSEC-2026-3941 Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups
Impact The several endpoints could leak object existence information to users who had no access to it by HTTP status code 403 instead of 404. Patches https://github.com/WeblateOrg/weblate/pull/19971 References Thanks to Yaohui Wang for reporting this via GitHub...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-76220 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-76220 Source advisory: OSV:PYSEC-2026-3843...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-76218 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-76218 Source advisory: OSV:PYSEC-2026-3840...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-76217 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-76217 Source advisory: OSV:PYSEC-2026-3841...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-67323 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-67323 Source advisory: OSV:PYSEC-2026-3839...