62356 matches found
CVE-2026-9090
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:21+00:00| seen| Telegram/KAYuHSInUTyY5sdHqTfJ-t-JAYNMtvmTlSN5y1liuC5CE 2026-07-17 00:00:38+00:00| seen| Telegram/KAYuHSInUTyY5sdHqTfJ-t-JAYNMtvmTlSN5y1liuC5CE 2026-07-18 00:00:22+00:00| published-proof-of-concept|...
CVE-2026-4298
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:19+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-17 00:00:36+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-18 00:00:24+00:00| published-proof-of-concept|...
CVE-2026-52614
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:07+00:00| seen| Telegram/eJTmWIryt99ubO9QtbnCAouqtws-13ZSYrG03ttlIfqzwDU 2026-07-16 19:00:08+00:00| seen| Telegram/5paqE9BZADOOkHSdC7twZCndT-XIbW43N6J0-aUcERlCO6E 2026-07-17 00:00:09+00:00| published-proof-of-concept|...
CVE-2026-15706
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:07+00:00| seen| Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI 2026-07-17 00:00:10+00:00| published-proof-of-concept| Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI 2026-08-20 14:30:05+00:00| seen|...
Missing Authentication for Critical Function
Overview oncall is an Oncall is a calendar tool designed for scheduling and managing on-call shifts Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the plugin install endpoint when sending a POST request with hardcoded default stackid and orgid...
CVE-2026-63087
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
Insertion of Sensitive Information Into Sent Data
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through OrganizationInvitationResource.toRepresentation in...
Insertion of Sensitive Information Into Sent Data
Overview @keycloak/keycloak-admin-ui is a This project is the next generation of the Keycloak Admin UI. It is written with React and PatternFly 4 and uses Vite. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through...
CVE-2026-59863
creationtimestamp| type| source ---|---|--- 2026-07-16 16:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqroonmn3q2m...
CVE-2026-63087
creationtimestamp| type| source ---|---|--- 2026-07-16 16:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c 2026-07-16 19:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22 2026-07-17 14:00:05+00:00| published-proof-of-concept|...
CVE-2026-55440
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMANDRESULTS handler in ufo/server/ws/handler.py called getorcreatesession in ufo/server/services/sessionmanager.py without ownerclientid, allowing an authenticated client to create ...
CVE-2026-15352
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:39+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-03 2026-07-16 23:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsewl6cyb2e 2026-07-30 23:00:46+00:00| seen|...
CVE-2026-8312
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...
CVE-2026-8085
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gyg37xi2p 2026-07-21 08:59:19+00:00| seen|...
CVE-2026-59860
creationtimestamp| type| source ---|---|--- 2026-07-16 16:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmthsmaf2l 2026-07-24 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrftsuervb2e...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087
Grafana OnCall 1.16.11 is affected by an unauthenticated token-hijack vulnerability via the internal plugin install endpoint. An attacker can POST to the endpoint using hardcoded default stack_id and org_id values to obtain a valid PluginAuthToken, which can be used to authenticate against intern...
CVE-2026-63087
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
EUVD-2026-44955
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...