19283 matches found
CVE-2026-53228
creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:39+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 15:54:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvrgwgh42f 2026-07-06 06:51:20+00:00| seen|...
CVE-2026-35096
creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:41+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-35095...
CVE-2026-48276
creationtimestamp| type| source ---|---|--- 2026-07-01 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkgmzkfc726 2026-07-01 09:45:03+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 12:00:35+00:00|...
CVE-2026-11387: Improper Authentication
The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...
PT-2026-54508
Name of the Vulnerable Software and Affected Versions SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery versions prior to 3.9.6 Description An issue exists that allows unauthenticated attackers to perform privilege escalation via account takeover. The plugin fai...
CVE-2026-10648
creationtimestamp| type| source ---|---|--- 2026-06-29 23:58:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphoxnxguj2q 2026-06-30 01:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphvjll4t22o...
CVE-2026-53426
creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphiguy5rn2x 2026-06-29 22:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkestmkb2d 2026-06-29 23:20:45+00:00| seen|...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...
CVE-2026-57956
creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph725ba3a2w 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph725cpjm2n 2026-06-29 21:54:04+00:00| seen|...
CVE-2026-56781
creationtimestamp| type| source ---|---|--- 2026-06-29 18:48:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5o2dlqv2o...
CVE-2026-57955
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...
CVE-2026-57956
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-48294
creationtimestamp| type| source ---|---|--- 2026-06-29 17:27:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz4tnidx2d 2026-07-22 15:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mraln3lnbe2p 2026-07-22 17:08:03+00:00| seen|...
CVE-2026-57956 SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956 SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...