26807 matches found
CVE-2026-77007
creationtimestamp| type| source ---|---|--- 2026-08-30 05:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmcdov752r...
EUVD-2026-68138
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2014-8110
creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-30 00:00:26+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-31 00:00:42+00:00| published-proof-of-concept|...
CVE-2026-53499
creationtimestamp| type| source ---|---|--- 2026-08-29 22:44:50+00:00| seen| https://bsky.app/profile/altdigitallatam.org/post/3muaxckwmzs2h...
CVE-2026-82549
creationtimestamp| type| source ---|---|--- 2026-08-29 22:21:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117181125768711993 2026-08-30 17:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucuj22bwn27 2026-08-30 17:04:47+00:00| seen|...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...
CVE-2026-82423
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
MINI-CX82-WV7M-C53J
Bulletin has no description...
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
EUVD-2026-68129
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-80668
creationtimestamp| type| source ---|---|--- 2026-08-29 14:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua4rolf6w2b...
CVE-2026-82269
creationtimestamp| type| source ---|---|--- 2026-08-29 14:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22cbhk422...
CVE-2026-18965
creationtimestamp| type| source ---|---|--- 2026-08-29 13:13:04+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mu7xe5uqzr2g...
CVE-2026-70341
creationtimestamp| type| source ---|---|--- 2026-08-29 08:02:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117177749475062529 2026-09-09 13:50:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv3okigklj2c...