62177 matches found
CVE-2026-48075
OpenReception’s OpenReception appointment-booking software contains an unauthenticated add-to-tunnel endpoint prior to version 1.0.5. The endpoint accepts any valid tunnelId and any emailHash (even across tunnels) to insert an appointment with status = CONFIRMED, attacker-controlled ciphertext fi...
GHSA-C4C3-PG64-4M4V
creationtimestamp| type| source ---|---|--- 2026-08-06 20:32:06+00:00| seen| https://gist.github.com/alon710/1523a448808a9bd39531599fad70a2e8...
GHSA-8RXV-JG7P-WVG3
creationtimestamp| type| source ---|---|--- 2026-08-06 19:32:23+00:00| seen| https://gist.github.com/alon710/73aecb4bf7a9c9303fe6451f784d95ea...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the user creation wizard endpoint. An attacker can determine if an email address is associated with an existing user by sending requests to this endpoint without having permission to view user information...
EUVD-2026-54231
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view...
CVE-2026-64664
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view...
CVE-2026-64664 Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view...
CVE-2026-9205
creationtimestamp| type| source ---|---|--- 2026-08-06 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgphlo4ks2m 2026-10-05 22:31:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jxw3-mjmx-3pqm...
CVE-2026-64592
creationtimestamp| type| source ---|---|--- 2026-08-06 17:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049769070717664 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...
GHSA-X677-9FXG-V5C5
creationtimestamp| type| source ---|---|--- 2026-08-06 17:31:27+00:00| seen| https://gist.github.com/alon710/b0c30693be99e5683b1b7fa34bf1c9d1...
CVE-2026-3430
creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjehd5472n...
CVE-2026-53977
creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjdzwjiu2z...
CVE-2026-43622
creationtimestamp| type| source ---|---|--- 2026-08-06 16:22:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/detkkxrgg2ojd 2026-08-06 19:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgpzhgv6y2n...
CVE-2026-66712
creationtimestamp| type| source ---|---|--- 2026-08-06 16:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgfzmvka72b...
CVE-2026-65574
creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfu35bbr2a...
CVE-2026-65583
creationtimestamp| type| source ---|---|--- 2026-08-06 15:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfc6pvha2u 2026-08-06 21:18:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2va2wi2b4zgy6 2026-08-07 09:07:06+00:00| seen|...
GHSA-3X6R-WXXG-53VV
creationtimestamp| type| source ---|---|--- 2026-08-06 15:31:19+00:00| seen| https://gist.github.com/alon710/164398037554120d630a453295ebf3cc...
CVE-2026-7726
creationtimestamp| type| source ---|---|--- 2026-08-06 15:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgdharb2f2c...