59182 matches found
CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function
The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest level 100 context, granting read/write...
CVE-2026-3611
The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest level 100 context, granting read/write...
GHSA-5HXF-C7J4-279C
creationtimestamp| type| source ---|---|--- 2026-03-12 19:40:05+00:00| seen| https://gist.github.com/alon710/d73d499cf1d6e8d3c3762966f6b93ea2...
CVE-2026-3841
creationtimestamp| type| source ---|---|--- 2026-03-12 19:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv5kvgukq2e 2026-03-28 10:34:10+00:00| seen| https://bsky.app/profile/secqube.com/post/3mi4goajcrj2n 2026-03-29 05:33:11+00:00| seen|...
CVE-2026-32247
creationtimestamp| type| source ---|---|--- 2026-03-12 19:21:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgv4ntac432u 2026-03-12 21:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgveuc6xww2n 2026-03-13 09:40:05+00:00| seen|...
GHSA-92GP-JFGX-9QPV
creationtimestamp| type| source ---|---|--- 2026-03-12 19:10:05+00:00| seen| https://gist.github.com/alon710/81922f2048444626dde8917d1920b821...
CVE-2019-25542
creationtimestamp| type| source ---|---|--- 2026-03-12 18:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguzadqire2u 2026-03-22 02:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmh5ou6z32m...
CVE-2026-4043
creationtimestamp| type| source ---|---|--- 2026-03-12 17:58:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguy2qg4wg27 2026-03-13 04:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116219892991017834 2026-03-28 06:33:10+00:00| seen|...
GHSA-2238-XC5R-V9HJ @tinacms/graphql has a Path Traversal issue
Description TinaCMS allows users to create, update, and delete content documents using relative file paths relativePath, newRelativePath via GraphQL mutations. Under certain conditions, these paths are combined with the collection path using path.join without validating that the resolved path...
CVE-2019-25528
creationtimestamp| type| source ---|---|--- 2026-03-12 17:40:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgux2h2nll2v 2026-03-19 18:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhgnmxfc362l...
CVE-2026-28793
creationtimestamp| type| source ---|---|--- 2026-03-12 17:32:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwm4hwro2n 2026-03-12 20:32:26+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2f24-mg4x-534q 2026-03-13 06:40:06+00:00| seen|...
CVE-2019-25524
creationtimestamp| type| source ---|---|--- 2026-03-12 17:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguw5qjbgv2e 2026-03-23 16:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhqis2y5ag2s...
CVE-2019-25537
creationtimestamp| type| source ---|---|--- 2026-03-12 17:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguw24e2bf2e...
CVE-2019-25532
creationtimestamp| type| source ---|---|--- 2026-03-12 17:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguvwqr3kc2u...
CVE-2026-2987
creationtimestamp| type| source ---|---|--- 2026-03-12 16:02:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgurjruwuq2u...
CVE-2019-25511
creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25511 2026-03-19 10:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhfqlaspbi2q...
GHSA-725G-W329-G7QR
creationtimestamp| type| source ---|---|--- 2026-03-12 15:10:05+00:00| seen| https://gist.github.com/alon710/ff6118da079f9d801f860c1d19254274...
EUVD-2026-11375
StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts...
StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts
Summary The REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at or above your own rank. This inconsistency allows an admin to create additional admin accounts...