58495 matches found
CVE-2026-67594 Spikster Missing Authentication via API Route Group
Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...
CVE-2026-51268
creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv477ouem2k 2026-07-30 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrva6zooad2n...
CVE-2026-63308
creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:03+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrv473bjqy24...
CVE-2026-66756
creationtimestamp| type| source ---|---|--- 2026-07-30 18:13:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/cv5imuadgzan6...
CVE-2026-54365
creationtimestamp| type| source ---|---|--- 2026-07-30 18:06:31+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mruzrbg7qk2o...
CVE-2026-13435
creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz32o3ut2z 2026-07-30 20:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7pcn7k2e 2026-08-05 04:07:08+00:00| seen|...
CVE-2026-12940
creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz2zcjdt2z 2026-07-30 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhq4nk622 2026-07-30 18:50:13+00:00| seen|...
CVE-2026-67174
creationtimestamp| type| source ---|---|--- 2026-07-30 17:48:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruyqccvhz2e...
GHSA-4MRV-5P47-P938
creationtimestamp| type| source ---|---|--- 2026-07-30 17:31:24+00:00| seen| https://gist.github.com/alon710/f9483ca84f65ab9c98c78744c876def1...
EUVD-2026-51199
Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by excluding the Laravel VerifyCsrfToken middleware from the global middleware stack in app/Http/Kernel.php. Attackers can...
CVE-2026-4978
creationtimestamp| type| source ---|---|--- 2026-07-30 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvppv5ys2z...
GHSA-VW27-FWJF-5QXM
creationtimestamp| type| source ---|---|--- 2026-07-30 16:49:48+00:00| seen| https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92 2026-07-30 19:33:36+00:00| seen| https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d 2026-07-30 19:33:48+00:00| seen|...
SUSE CVE-2026-54089
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Starting with 2.0.0-rc.1, when FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server...
CVE-2026-59326
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:18+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...
CVE-2026-57862
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ilw4ytaebzud5...
JLSEC-2026-1069 ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder...
ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...
JLSEC-2026-1058 ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or...
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...
CVE-2026-67424
creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8 2026-07-30 16:35:03+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-c9hr-64h3-gxpc...
CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...