59236 matches found
CVE-2026-28194
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
CVE-2026-3168
creationtimestamp| type| source ---|---|--- 2026-02-25 09:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfofatjxur2y 2026-02-25 20:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfphtwyts62e...
CVE-2026-1916 WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token
The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication mechanism on the wpgsicallBackFuncAccept and wpgsicallBackFuncUpdate REST API functions in all versions up to, and...
WordPress WPGSI: Spreadsheet Integration plugin <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token vulnerability
Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - cyberdogzmarketing.com | krei.dev | ogbuilders.io in WordPress Plugin Spreadsheet Integration – Automate Google Sheets With WordPress...
CVE-2026-27744
creationtimestamp| type| source ---|---|--- 2026-02-25 05:39:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxqfiqym2u 2026-02-25 18:12:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtcohfi2d 2026-03-09 00:00:00+00:00| seen|...
CVE-2026-27567
creationtimestamp| type| source ---|---|--- 2026-02-25 04:40:18+00:00| seen| https://gist.github.com/alon710/1f5269447a1894adbb81b93906c7462d...
GHSA-M2CQ-XJGM-F668
creationtimestamp| type| source ---|---|--- 2026-02-25 04:10:19+00:00| seen| https://gist.github.com/alon710/b552dead23033effdfd76ba11d312188...
CVE-2026-27637 FreeScout's Predictable Authentication Token Enables Account Takeover
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's TokenAuth middleware uses a predictable authentication token computed as MD5userid + createdat + APPKEY. This token is static never expires/rotates, and if an attacker obtains...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the CreateNewDAG API endpoint when the DAG name is not properly validated before being passed to the file store. An attacker can write arbitrary YAML files outside the intended directory, potentially overwriting...
GHSA-X76F-JF84-RQJ8
creationtimestamp| type| source ---|---|--- 2026-02-25 02:40:26+00:00| seen| https://gist.github.com/alon710/0a4d2120827a83418bc6e8325fbd6767...
CVE-2026-3133
creationtimestamp| type| source ---|---|--- 2026-02-25 01:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnjn5wcah24 2026-02-26 12:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfr5ikfyig2l...
CVE-2026-3134
creationtimestamp| type| source ---|---|--- 2026-02-25 01:21:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnje7icfp2u 2026-02-26 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfpzpxm5q22m...
GHSA-G3GW-Q23R-PGQM
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:20+00:00| seen| https://gist.github.com/alon710/3c4ee34d2cdc53cc5dccf62f09e44104...
GHSA-QRVQ-68C2-7GRW
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:14+00:00| seen| https://gist.github.com/alon710/fd5d02a6656a9e8c9e49f270ac2dcd9c...
GHSA-9FWW-8CPR-Q66R
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:13+00:00| seen| https://gist.github.com/alon710/b49abcb62186b1e9a08e776c001b1b45...
GHSA-GWR3-X37H-H84V
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:08+00:00| seen| https://gist.github.com/alon710/5e35b72698f3cf694fe848d6fa99d6b9...
GHSA-V994-63CG-9WJ3
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:07+00:00| seen| https://gist.github.com/alon710/93497b272a1acc6d5d3838b0e2ce709a...
CVE-2026-27156
creationtimestamp| type| source ---|---|--- 2026-02-25 01:08:04+00:00| seen| https://gist.github.com/alon710/2374cc8dbd605d3c0e5e8ece442a11db...