174400 matches found
CVE-2026-18500
@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify key is silently overridden by the plugin's globally configured secret, because the option merge applies the global key last. Applications that use different...
CVE-2026-19895
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
MINI-9G9X-7R2V-J44C
Bulletin has no description...
CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
CVE-2026-19895
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
EUVD-2026-59760
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
CVE-2026-19895
CVE-2026-19895 affects open source POS Open Source Point of Sale, version up to 3.4.2. The vulnerability lies in Login::index (file app/Config/Filters.php, Login Endpoint), where excessive authentication attempts are improperly restricted. This allows a remote attack with high complexity; exploit...
CVE-2026-18500
CVE-2026-18500 concerns the @fastify/jwt plugin for Fastify. In versions before 10.2.2, a per-request key passed to request.jwtVerify({ key }) can be silently overridden by the plugin’s globally configured secret due to the option merge applying the global key last. This allows an ordinary authen...
CVE-2026-12795
A flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the json.dumps function. The successful exploitation of this flaw could lead to unauthorized access and potential information disclosure...
MINI-HRCC-C7VX-FJ35
Bulletin has no description...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-43975 vulnerabilities
Vulnerabilities for packages: geoserver...
CVE-2020-0228
creationtimestamp| type| source ---|---|--- 2026-08-15 08:00:11+00:00| seen| Telegram/tpKn25chglz1Cvi4exaSjR3xVCVPiynHFcxGRPE3yrafOA 2026-08-15 08:00:12+00:00| seen| Telegram/IcumU2Dn789Qi8XnTXdSNFGPLRC7M3SjpeamJGuc-P0nHQ 2026-08-16 00:00:10+00:00| published-proof-of-concept|...
MINI-7546-PJ6G-C33V
Bulletin has no description...
MINI-6M5F-R8M6-RFVW
Bulletin has no description...
MINI-GWGP-H24X-Q3CG
Bulletin has no description...
MINI-J2MC-P5X4-22XH
Bulletin has no description...
MINI-4PGH-6J25-G227
Bulletin has no description...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre NCSC-NL has warned. The vulnerability in question is CVE-2026-65400 CVSS score: 9.8, a critical authentication issue...