59111 matches found
CVE-2026-35063
OpenPLCV3 REST API endpoint checks for JWT presence but never verifies the caller's role. Any authenticated user with role=user can delete any other user, including administrators, by specifying their user ID or they can create new accounts with role=admin, escalating to full administrator access...
CVE-2026-39958
creationtimestamp| type| source ---|---|--- 2026-04-09 19:48:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3layj6fg2g 2026-04-13 21:22:24+00:00| seen| Telegram/T6lH2Tb9WgoQSprZe9qAhfyNPVN15xjvjGP6Y4-bIX71SI...
GHSA-9HFR-GW99-8RHX
creationtimestamp| type| source ---|---|--- 2026-04-09 19:23:14+00:00| seen| Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4...
CVE-2026-40069
creationtimestamp| type| source ---|---|--- 2026-04-09 19:23:14+00:00| seen| Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4 2026-04-12 08:45:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbxku5rs424...
CVE-2026-39322
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates a valid session for banned accounts before verifying the supplied password. That session is then accepted across authenticated /api routes, enabling account data access and...
GHSA-XRW6-GWF8-VVR9
creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...
GHSA-8GGW-HFR6-RW3X
creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...
GHSA-MC53-48W8-9G63
creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...
GHSA-393C-P46R-7C95
creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...
CVE-2026-35063
OpenPLCV3 REST API endpoint checks for JWT presence but never verifies the caller's role. Any authenticated user with role=user can delete any other user, including administrators, by specifying their user ID or they can create new accounts with role=admin, escalating to full administrator access...
CVE-2026-40190
creationtimestamp| type| source ---|---|--- 2026-04-09 18:42:43+00:00| published-proof-of-concept| https://github.com/langchain-ai/langsmith-sdk/security/advisories/GHSA-fw9q-39r9-c252 2026-04-10 22:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6dnzceml2x...
GHSA-HX87-8754-XVH4
creationtimestamp| type| source ---|---|--- 2026-04-09 17:23:27+00:00| seen| Telegram/UYy9QXiDWOzFY7CBVA8MS0Xr-No70LVttPhqPBLktKhMGyQ...
CVE-2026-39853
creationtimestamp| type| source ---|---|--- 2026-04-09 17:23:27+00:00| seen| Telegram/UYy9QXiDWOzFY7CBVA8MS0Xr-No70LVttPhqPBLktKhMGyQ 2026-04-12 11:36:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjcb5bt4ru2w 2026-04-18 03:37:07+00:00| seen|...
CVE-2026-5439
creationtimestamp| type| source ---|---|--- 2026-04-09 16:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3b2jklkn25 2026-04-14 20:03:14+00:00| published-proof-of-concept| Telegram/P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY...
CVE-2025-45806
creationtimestamp| type| source ---|---|--- 2026-04-09 16:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj375hm4tz25...
CVE-2026-34020
creationtimestamp| type| source ---|---|--- 2026-04-09 14:53:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj32qgmxgz2y 2026-04-10 23:26:51+00:00| seen| Telegram/VmPzW9vK7p7Zve81sAsPaRrRR2EIHLwag0ULU7f22817b0 2026-04-12 11:36:29+00:00| seen|...
CVE-2026-25446
creationtimestamp| type| source ---|---|--- 2026-04-09 13:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2w3wd4cb2o...
CVE-2026-4116
creationtimestamp| type| source ---|---|--- 2026-04-09 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tufseft2h 2026-04-09 16:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj37gjfpqt22 2026-04-12 09:28:48+00:00| seen|...
CVE-2026-1403
creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tm4jzoj2z 2026-04-09 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260410...