58967 matches found
CVE-2026-53634 Sharp: Missing Authorization Check in Quick Creation Command Endpoints
Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the create and store endpoints of the Quick Creation Command feature did not enforce any authorization check. An authenticated Sharp user without create permission on a given entit...
CVE-2026-53634
The CVE concerns Sharp (Laravel package) where the Quick Creation Command endpoints (create and store) from version 9.0.0 up to just before 9.22.3 failed to enforce authorization checks. An authenticated Sharp user lacking create permission on a target entity could access the creation form or sub...
CVE-2026-50570
creationtimestamp| type| source ---|---|--- 2026-06-10 19:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxi34cuoo2h...
CVE-2026-50638
creationtimestamp| type| source ---|---|--- 2026-06-10 19:23:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxgqgtcdm22...
CVE-2026-50564
creationtimestamp| type| source ---|---|--- 2026-06-10 19:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgpf7ogi25 2026-07-01 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842838632410584 2026-07-01 04:30:31+00:00| seen|...
CVE-2026-46618
creationtimestamp| type| source ---|---|--- 2026-06-10 19:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxg2fosui25...
CVE-2026-0267
creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...
CVE-2026-49821
creationtimestamp| type| source ---|---|--- 2026-06-10 19:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxflcnabj26...
CVE-2026-11596
In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens...
CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls,...
CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls,...
CVE-2026-20253
Summary: CVE-2026-20253 affects Splunk Enterprise and Splunk Cloud Platform due to an unauthenticated PostgreSQL sidecar service endpoint that can create or truncate arbitrary files when exposed on the network. Affected software/versions (per sources): Splunk Enterprise < 10.2.4 and < 10.0....
CVE-2026-11596
In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens...
CVE-2026-49840
creationtimestamp| type| source ---|---|--- 2026-06-10 16:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnx5hdfrqi2f...
GHSA-H25M-26QC-WCJF
creationtimestamp| type| source ---|---|--- 2026-06-10 16:20:08+00:00| seen| https://gist.github.com/jmcveen/2d2b8e075a88abf882695479e38437d1...
CVE-2026-11603
creationtimestamp| type| source ---|---|--- 2026-06-10 16:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnx4c47w5x22...
CVE-2026-49498
creationtimestamp| type| source ---|---|--- 2026-06-10 15:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2kwtz462f 2026-06-11 22:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2aefrrlq2i...
CVE-2026-52758
creationtimestamp| type| source ---|---|--- 2026-06-10 15:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwz7deg5b2q 2026-06-11 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnziveizyk22...
CVE-2026-53439
creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...