PT-2026-69750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the carl9170 tx process status function. The issue is caused by an off-by-two error in the bounds check, which uses the comparison i cmd-hdr.len / 2 + 1...

CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-19345 code-projects Task Management System UpdateTaskStatus.php authorization

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-71991

creationtimestamp| type| source ---|---|--- 2026-08-09 01:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmf3yogwh2y...

CVE-2026-19341

creationtimestamp| type| source ---|---|--- 2026-08-08 17:03:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117060966342443793...

Prometheus CVE-2026-42151 Secret Disclosure Detect

Detects CVE-2026-42151 in Prometheus 2.48.0–3.5.2 and 3.6.0–3.11.2: OAuthConfig.ClientSecret was a plain Go string instead of configutil.Secret, so /api/v1/status/config and /-/config emit the real Azure AD clientsecret instead of redacting it as ''. !/usr/bin/env python3 -- coding: utf-8 --...

CVE-2026-20346

creationtimestamp| type| source ---|---|--- 2026-08-08 15:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117060495821023885 2026-08-10 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...

CVE-2026-68082

creationtimestamp| type| source ---|---|--- 2026-08-08 14:36:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117060389626457586...

MINI-R82J-P739-HGQ4

Bulletin has no description...

CVE-2026-19195

creationtimestamp| type| source ---|---|--- 2026-08-08 12:06:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059799868254552 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97246 2026-08-09 14:02:14+00:00| published-proof-of-concept|...

GHSA-WPQR-6V78-JR5G

creationtimestamp| type| source ---|---|--- 2026-08-08 11:48:00+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585...

CVE-2026-66060

creationtimestamp| type| source ---|---|--- 2026-08-08 11:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059546548263152...

GHSA-7C4V-FWGW-9RF7

creationtimestamp| type| source ---|---|--- 2026-08-08 09:31:21+00:00| seen| https://gist.github.com/alon710/9318966a289b67d09be3b424c52f31ab...

GHSA-29G2-3RMR-QM68

creationtimestamp| type| source ---|---|--- 2026-08-08 08:31:57+00:00| seen| https://gist.github.com/alon710/47ff7eb96677e04e1cb388be69ae9049...

CVE-2026-16578

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

CVE-2026-63220

creationtimestamp| type| source ---|---|--- 2026-08-08 06:36:21+00:00| seen| https://gist.github.com/alon710/8161c68753a945887582acb72752fba7...

CVE-2026-16578 Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

CVE-2026-16578

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin, in versions before 1.4.0 , is vulnerable to unauthenticated user data disclosure. The root cause is a missing capability check on the 2fa/app/users REST API endpoint. This flaw allows unauthentic...