CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

EUVD-2026-41367

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

CVE-2026-57753

creationtimestamp| type| source ---|---|--- 2026-07-02 12:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnzgmn3h62o 2026-07-03 00:47:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppd45xl2o2n 2026-07-03 04:02:37+00:00| seen|...

CVE-2026-57764

creationtimestamp| type| source ---|---|--- 2026-07-02 12:17:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnz7vqjr52m 2026-07-02 13:44:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpo625wqws2j 2026-07-03 00:45:22+00:00| seen|...

CVE-2026-57750

creationtimestamp| type| source ---|---|--- 2026-07-02 12:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnyd7myy42n 2026-07-03 00:42:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcttkcco2u...

CVE-2026-14363

creationtimestamp| type| source ---|---|--- 2026-07-02 11:57:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny3ojzfa2d...

CVE-2026-57762

creationtimestamp| type| source ---|---|--- 2026-07-02 11:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnxz3twfs2o 2026-07-02 16:02:49+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofscccbl2m 2026-07-03 00:45:10+00:00| seen|...

CVE-2026-13789

creationtimestamp| type| source ---|---|--- 2026-07-02 09:19:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpbyrfop2t 2026-07-03 07:31:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzph3j3t2d 2026-07-07 21:53:57+00:00| seen|...

CVE-2026-12134 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-12657 LatePoint <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation via 'service_id' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.2 via the 'serviceid' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-11578

creationtimestamp| type| source ---|---|--- 2026-07-02 08:30:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnmjyq3om26 2026-07-02 20:12:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotr7dht427...

CVE-2026-34098

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmcjipcd26 2026-07-02 09:26:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpn3gozq2u...

CVE-0000-0001

creationtimestamp| type| source ---|---|--- 2026-07-02 07:56:25+00:00| seen| https://gist.github.com/tu-trinh-scale/265fe56213773656e2eb7ef2f25c2394 2026-07-02 07:56:27+00:00| seen| https://gist.github.com/tu-trinh-scale/14715efedc4ce81a9789a4cbdcf13286 2026-07-03 08:17:56+00:00| seen|...

CVE-0000-0002

creationtimestamp| type| source ---|---|--- 2026-07-02 07:56:25+00:00| seen| https://gist.github.com/tu-trinh-scale/265fe56213773656e2eb7ef2f25c2394 2026-07-02 07:56:27+00:00| seen| https://gist.github.com/tu-trinh-scale/14715efedc4ce81a9789a4cbdcf13286 2026-07-03 09:17:40+00:00| seen|...

CVE-2026-5821

creationtimestamp| type| source ---|---|--- 2026-07-02 07:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnkd3ji6c2n 2026-07-02 20:13:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpots6j3lb2k...

CVE-2026-5051

creationtimestamp| type| source ---|---|--- 2026-07-02 07:47:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnk5hh7a22d 2026-07-02 18:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116851914441373282...

CVE-2026-58520

creationtimestamp| type| source ---|---|--- 2026-07-02 07:46:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnk2m7ez522...

CVE-2026-57722

creationtimestamp| type| source ---|---|--- 2026-07-02 07:32:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnjb3klmd2d...

CVE-2026-13795

creationtimestamp| type| source ---|---|--- 2026-07-02 07:18:51+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 09:20:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpcqqa7m22 2026-09-24 15:54:53+00:00| seen|...