58882 matches found
CVE-2026-54320
creationtimestamp| type| source ---|---|--- 2026-06-23 20:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moy7cs26fp2f...
CVE-2025-64105 FOSSBilling: IDOR Vulnerability in Support Ticket Creation
FOSSBilling is a billing and client management system that automates invoicing, payments, and communication for online service businesses. Versions 0.6.21 through 0.7.2 are vulnerable to IDOR through the support ticket creation workflow. By manipulating relid when reltype=order, an authenticated...
CVE-2025-64105
Summary: FOSSBilling
CVE-2025-64105 FOSSBilling: IDOR Vulnerability in Support Ticket Creation
FOSSBilling is a billing and client management system that automates invoicing, payments, and communication for online service businesses. Versions 0.6.21 through 0.7.2 are vulnerable to IDOR through the support ticket creation workflow. By manipulating relid when reltype=order, an authenticated...
CVE-2025-64105
FOSSBilling is a billing and client management system that automates invoicing, payments, and communication for online service businesses. Versions 0.6.21 through 0.7.2 are vulnerable to IDOR through the support ticket creation workflow. By manipulating relid when reltype=order, an authenticated...
CVE-2026-12957
creationtimestamp| type| source ---|---|--- 2026-06-23 17:54:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxxui6sh62t 2026-06-25 14:56:43+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mp4otnuzjr2v 2026-06-26 14:34:55+00:00| seen|...
CVE-2026-56115
Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but...
CVE-2026-42867 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without...
CVE-2026-42867 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without...
CVE-2026-44274
creationtimestamp| type| source ---|---|--- 2026-06-23 16:26:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116800356044077803...
CVE-2026-35018
creationtimestamp| type| source ---|---|--- 2026-06-23 16:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsmyk3dz2q...
CVE-2026-44961
The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129. As a result, API users could create usernames that enabled impersonation or stored XSS attacks. Proper validation has been added where it was missing...
CVE-2026-56115 Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass
Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but...
CVE-2026-50023
CVE-2026-50023 affects yt-dlp. Before 2026-06-09, an issue allowed remote attackers to write arbitrary OS-shortcut files (e.g., .desktop, .url, .webloc) via the --write-link option by exploiting unsafe extensions that were on the allowlist, bypassing the prior CVE-2024-38519 remediation. This cou...
CVE-2025-71370
creationtimestamp| type| source ---|---|--- 2026-06-23 14:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxn3phlth2q...
CVE-2026-56248
creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...
CVE-2026-56225
creationtimestamp| type| source ---|---|--- 2026-06-23 14:19:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlsg2pk52s...
CVE-2026-56258
creationtimestamp| type| source ---|---|--- 2026-06-23 14:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlmgqhll2w 2026-06-29 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfcdup5pk2t...
GHSA-74P7-6H78-GW8P
creationtimestamp| type| source ---|---|--- 2026-06-23 13:42:51+00:00| seen| https://gist.github.com/alon710/11eb496838c824b891dd239de0d0e0b4 2026-06-23 13:51:48+00:00| seen| https://gist.github.com/alon710/ba15b4769d69aa0e2cc9924898cce4e0...