26988 matches found
GHSA-H3M5-97JQ-QJRF
creationtimestamp| type| source ---|---|--- 2026-06-22 03:42:22+00:00| seen| https://gist.github.com/alon710/2f8edd2e7aeda928380e8cf2e8c29eb1...
GHSA-WVRH-2F4M-924V
creationtimestamp| type| source ---|---|--- 2026-06-22 03:21:45+00:00| seen| https://gist.github.com/alon710/f71625529d1c2c0e0c6b0f02ed674488 2026-06-22 03:32:02+00:00| seen| https://gist.github.com/alon710/c7e86c644a18ac812b6d13eff8101d8c 2026-06-22 03:42:22+00:00| seen|...
PT-2026-51411
Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An information disclosure issue exists in the '/functions/v1/channel self' endpoint. Unauthenticated remote attackers can send GET requests using arbitrary app id parameters to enumerate non-public...
PT-2026-51320
Name of the Vulnerable Software and Affected Versions Mattermost version 11.7.0 Mattermost versions prior to 10.11.17 Description Insufficient enforcement of bot-specific permission checks on the user active status endpoint allows a User Manager with user management write access, but lacking...
PT-2026-51440
Name of the Vulnerable Software and Affected Versions Paymenter versions prior to 1.5.0 Description The email update functionality fails to invalidate the existing verification state when a user changes their email address. This allows a verified account to retain its verified status after...
MINI-F3M6-Q24V-JVP6
Bulletin has no description...
CVE-2026-10877
creationtimestamp| type| source ---|---|--- 2026-06-21 17:55:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116789381354188381...
CVE-2026-56229
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
EUVD-2026-38164
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
CVE-2026-56229
Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...
CVE-2026-56229
Capgo before 12.128.2 has an authorization bypass in /build/status and /build/logs that lets an attacker access build jobs from other apps by mixing app_id and job_id. Limited API keys scoped to one app can read status/logs across apps by using an authorized app_id with a job_id from another app,...
MINI-2Q3P-5HC5-XQ7G
Bulletin has no description...
CVE-2026-12782
creationtimestamp| type| source ---|---|--- 2026-06-21 10:32:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116787630904398394 2026-06-22 01:39:40+00:00| seen| https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master...
PT-2026-51218
Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An authorization bypass exists in the '/build/status' and '/build/logs' endpoints. Attackers can access build jobs belonging to different applications by providing a mismatched app id and job id...
CVE-2026-56304
creationtimestamp| type| source ---|---|--- 2026-06-20 20:19:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqok5jmtt2f...