27019 matches found
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the server-status WebSocket stream. An attacker can access telemetry data for all servers, including those belonging to other users, by connecting as any authenticated non-admin member. Remediation Upgrade...
CVE-2026-47124 Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...
GHSA-GV7W-RQVM-QJHR
creationtimestamp| type| source ---|---|--- 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205dac4 2026-06-13 16:40:27+00:00| seen| https://gist.github.com/konard/10edfaf46f7ba58bdd3e22a15167f9bc 2026-06-13 16:54:05+00:00| seen|...
GHSA-FP5J-4FJ2-4JVQ Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs Summary A configuration-validation issue in the Radius Kubernetes controller can cause it to issue a DELETE for the container resource referenced by a tampered radapp.io/status annotation...
CVE-2026-46054
creationtimestamp| type| source ---|---|--- 2026-06-12 19:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116738725787227262 2026-07-02 06:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:17:49+00:00|...
CVE-2026-45833
creationtimestamp| type| source ---|---|--- 2026-06-12 18:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dbluklu2x 2026-09-02 01:00:15+00:00| seen| Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is 2026-09-03 00:00:38+00:00| published-proof-of-concept|...
CVE-2026-45830
creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...
MINI-X7XG-RVWP-6374
Bulletin has no description...
Exploit for CVE-2026-49777
CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...
CGA-R78V-2M6W-5437
Bulletin has no description...
CVE-2026-44250
creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...
CVE-2026-47124: Exposure of Sensitive Information to an Unauthorized Actor
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.9, any authenticated non-admin member can connect to the server-status WebSocket and receive telemetry for all servers, including servers owned by other users...
VRChat says reported data breach never happened
A data breach notice has been filed with the Maine Attorney General, saying more than 2.4 million users of VRChat have had their data breached. The question is, was it VRChat who filed the breach notice, or did someone pretending to represent the company post it instead? On Reddit, a VRChat...
CVE-2026-40995
CVE-2026-40995 affects Spring Web Services versions 3.1.0–3.1.8, 4.0.0–4.0.18, 4.1.0–4.1.3, and 5.0.0–5.0.1. The issue arises in the X509AuthenticationProvider, which could issue a fully authenticated X509AuthenticationToken when a presented certificate maps to a UserDetails, without applying Spr...
Chatwoot Scanner
This is a security assessment tool designed to evaluate authentication status, response behavior, and possible exposure indicators in Chatwoot conversation filtering functionality...
VMware Spring Web Services 安全漏洞
VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from the...
ALSA-2026:25341 Important: tomcat9 update
Certificate revocation bypass due to improper OCSP response validation...