124536 matches found
CVE-2026-10655
creationtimestamp| type| source ---|---|--- 2026-06-30 18:17:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmfwxtzh2v...
GHSA-G4W6-VMGF-XQVX @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
Summary @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. An issue exists where, under...
@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
Summary @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. An issue exists where, under...
CVE-2026-58174
creationtimestamp| type| source ---|---|--- 2026-06-30 18:03:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z 2026-07-02 06:06:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k...
CVE-2026-58377
creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...
CVE-2026-12349
creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...
GHSA-5Q4Q-834J-G8G4 Paymenter has URL parameter injection that bypasses paid plan limits at checkout
Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurations, a...
CVE-2026-58014
creationtimestamp| type| source ---|---|--- 2026-06-30 14:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjatls7xm2z 2026-07-02 05:52:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndpmanhq2i 2026-07-21 12:01:01+00:00| seen|...
CVE-2026-13474
creationtimestamp| type| source ---|---|--- 2026-06-30 14:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7prwa4f2j 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...
CVE-2026-58010
creationtimestamp| type| source ---|---|--- 2026-06-30 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6dq57qp2t 2026-07-03 12:18:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjqorsrj2j 2026-07-05 03:23:39+00:00| seen|...
CVE-2026-58374
creationtimestamp| type| source ---|---|--- 2026-06-30 14:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj67lqvub23 2026-07-06 12:03:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpy2c74dl62h...
CVE-2026-47105
creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...
CVE-2026-14162
Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...
CVE-2026-14162
Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...
CVE-2026-12610
creationtimestamp| type| source ---|---|--- 2026-06-30 10:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiscbuw6r2w 2026-07-30 16:31:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mruuhjm6g22i 2026-07-30 16:31:36+00:00| seen|...
CVE-2026-14164
creationtimestamp| type| source ---|---|--- 2026-06-30 10:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirik6atm2z 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
EUVD-2026-40271
Cross-Site Scripting XSS vulnerability in Intermark IT's WebControl CMS v3.5. This vulnerability allows an attacker to execute JavaScript code or inject a dynamic iframe into the victim’s browser by sending a malicious URL via the 'urlDestino' parameter in '/portal.do'. This vulnerability can be...
CVE-2026-12560
The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...