59105 matches found
CVE-2026-25770
creationtimestamp| type| source ---|---|--- 2026-03-17 21:02:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbunjfvy62k 2026-03-17 21:02:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbuocmang26 2026-03-19 18:20:09+00:00| seen|...
GHSA-2F9H-23F7-8GCX AVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deployments
Summary The install/checkConfiguration.php endpoint performs full application initialization — database setup, admin account creation, and configuration file write — from unauthenticated POST input. The only guard is checking whether videos/configuration.php already exists. On uninitialized...
AVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deployments
Summary The install/checkConfiguration.php endpoint performs full application initialization — database setup, admin account creation, and configuration file write — from unauthenticated POST input. The only guard is checking whether videos/configuration.php already exists. On uninitialized...
CVE-2026-4295
creationtimestamp| type| source ---|---|--- 2026-03-17 19:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4295 2026-03-17 20:48:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbtuq4djs2c 2026-04-30 12:30:32+00:00| seen|...
CVE-2025-64301
creationtimestamp| type| source ---|---|--- 2026-03-17 19:00:34+00:00| seen| https://infosec.place/objects/565ff8cd-4460-435b-ac33-92828813ed8a 2026-03-17 19:31:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbpknypna2v 2026-03-19 13:40:09+00:00| seen|...
CVE-2025-66000
creationtimestamp| type| source ---|---|--- 2026-03-17 19:00:28+00:00| seen| https://infosec.place/objects/e0a1d36d-36de-4e6e-9304-160cc8ea3115...
CVE-2025-62500
creationtimestamp| type| source ---|---|--- 2026-03-17 19:00:11+00:00| seen| https://infosec.place/objects/4f3190b0-b252-4462-908e-c8ab9a64a8a6...
GHSA-5V7G-9H8F-8PGG Parse Server session creation endpoint allows overwriting server-generated session fields
Impact An authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST /classes/Session. This allows bypassing the server's session expiration policy by setting an arbitrary far-future expiration date. It also allows...
Parse Server session creation endpoint allows overwriting server-generated session fields
Impact An authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST /classes/Session. This allows bypassing the server's session expiration policy by setting an arbitrary far-future expiration date. It also allows...
CVE-2026-30953
creationtimestamp| type| source ---|---|--- 2026-03-17 17:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbjdsyb322e...
CVE-2026-28519
creationtimestamp| type| source ---|---|--- 2026-03-17 17:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbh4h2rtx2u 2026-08-19 09:34:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mtgghda2562f...
CVE-2026-3839
creationtimestamp| type| source ---|---|--- 2026-03-17 15:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbbjigfj62a...
CVE-2026-4147
creationtimestamp| type| source ---|---|--- 2026-03-17 15:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4147...
CVE-2018-20026
creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...
CVE-2023-49675
creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...
CVE-2019-19789
creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...
CVE-2026-33131
creationtimestamp| type| source ---|---|--- 2026-03-17 11:50:55+00:00| published-proof-of-concept| https://github.com/h3js/h3/security/advisories/GHSA-3vj8-jmxq-cgj5 2026-03-20 13:53:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhio42zzri2u 2026-03-20 21:40:09+00:00| seen|...
UBUNTU-CVE-2026-3633
A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the soupmessagenew function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the method value is not properly...
EUVD-2026-12547
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
