58958 matches found
CVE-2026-44924
creationtimestamp| type| source ---|---|--- 2026-05-20 18:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckqoujmd2v...
CVE-2026-8342
creationtimestamp| type| source ---|---|--- 2026-05-20 18:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckkh4dd52q...
CVE-2026-9136 Unauthorized ShadowAttribute modification in MISP via client-supplied identifier
A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...
CVE-2026-9136
CVE-2026-9136 affects the ShadowAttribute proposal creation workflow in MISP. An add action accepted client-supplied ShadowAttribute data without stripping the id field, allowing an authenticated user to supply the identifier of an existing ShadowAttribute and cause an update instead of creating ...
EUVD-2026-31151
A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...
CVE-2026-9136 Unauthorized ShadowAttribute modification in MISP via client-supplied identifier
A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...
CVE-2026-44926
creationtimestamp| type| source ---|---|--- 2026-05-20 18:38:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckhmekmx2k 2026-05-23 02:02:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmie3qglzs2g...
MAL-2026-4553 Malicious code in ethers-wallet-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6dae6dc459fa2ef437e532af4b27b6c50360a40cdb9d91563d25a48bae88cec Package name impersonates the official @ethersproject/wallet, and package.json spoofs the ethers.js maintainer identity author 'Richard Moore '. The...
GHSA-73QR-PFMQ-6RP6
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:13+00:00| seen| https://gist.github.com/steig/ddd6193b319e8b70af8f2659034a7922...
CVE-2026-45443
creationtimestamp| type| source ---|---|--- 2026-05-20 15:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc6l7vybf2i...
GHSA-5C46-X3QW-Q7J7
creationtimestamp| type| source ---|---|--- 2026-05-20 14:50:44+00:00| seen| https://t.me/bdufstecru/3182 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...
GHSA-CQ46-HP4H-CVFR
creationtimestamp| type| source ---|---|--- 2026-05-20 14:47:50+00:00| seen| https://t.me/bdufstecru/3179...
CVE-2026-8469
Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenixstorybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to atoms using String.toatom/1 without...
CVE-2026-46352
creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...
CVE-2026-45764
creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...
CVE-2026-45752
creationtimestamp| type| source ---|---|--- 2026-05-20 14:15:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c...
CVE-2026-42834
creationtimestamp| type| source ---|---|--- 2026-05-20 13:46:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116607206794194616 2026-05-20 14:10:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3hfcycd2m 2026-05-20 14:57:01+00:00| seen|...
CVE-2026-8469 Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook
Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenixstorybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to atoms using String.toatom/1 without...
EEF-CVE-2026-8469 Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook
Summary Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix\storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to atoms using String.to\atom/1...