31125 matches found
CVE-2026-28314
creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...
CVE-2026-16407
creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...
CVE-2026-1617
creationtimestamp| type| source ---|---|--- 2026-07-21 11:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5puffh442v 2026-07-21 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr5r4jbqma2l 2026-07-21 13:21:30+00:00| seen|...
CVE-2026-14185
creationtimestamp| type| source ---|---|--- 2026-07-21 10:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kjwyjep2e...
CVE-2026-53594
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...
CVE-2026-53594
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...
CVE-2026-53594
Summary: CVE-2026-53594 affects FreeScout (PHP/Laravel) where the App Logs viewer can read arbitrary server files due to a flawed path resolution in the rap2hpoutre/laravel-log-viewer override. Before v1.8.224, the code accepts any existing absolute path prior to applying the storage/logs restric...
CVE-2026-53594 FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...
CVE-2026-63108
creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43i5ubog2q 2026-07-20 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bbgq76c2i...
CVE-2026-64205
creationtimestamp| type| source ---|---|--- 2026-07-20 18:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vwdc7b22j 2026-07-22 09:05:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr7xsftuey2g 2026-07-22 09:05:30+00:00| seen|...
CVE-2026-57310
creationtimestamp| type| source ---|---|--- 2026-07-20 15:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3njkaeqm2j 2026-07-20 16:45:02+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-57309...
CVE-2026-42566
Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...
Linux Distros Unpatched Vulnerability : CVE-2026-42566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed...
EUVD-2026-45874
Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...
CVE-2026-42566
The CVE affects Meshtastic firmware prior to 2.7.23.b246bcd where a single node advertising a User.long_name containing malformed UTF-8 over LoRa can render other radios unusable over BLE when managed via the iOS app. Root cause: a null terminator can be placed in the middle of a multibyte sequen...
CVE-2026-64173
creationtimestamp| type| source ---|---|--- 2026-07-19 18:01:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzedld6t62o 2026-08-03 08:15:04+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...
CVE-2026-16221
creationtimestamp| type| source ---|---|--- 2026-07-19 14:22:06+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mqyy3s7vts2h 2026-07-19 16:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lio7ut2d 2026-07-19 16:04:10+00:00| seen|...
CVE-2026-16223
1Panel-dev CordysCRM up to 1.4.1 is affected in the Third Party Edit Endpoint, specifically the IntegrationConfigService.getSqlBotSrc function. A manipulated appSecret can trigger server-side request forgery (SSRF) and the issue can be exploited remotely. The exploit has been publicly disclosed a...
