94703 matches found
CVE-2026-7427
creationtimestamp| type| source ---|---|--- 2026-08-12 19:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4eiui2orbis7y 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...
CVE-2026-72800
SiYuan before v3.7.4 is affected by information-disclosure flaws due to missing publish-access filtering on getAttributeViewKeysByID, enabling authenticated readers to retrieve full database column schemas (descriptions, vocabularies, template expressions). Additionally, getBlockDefIDsByRefText a...
CVE-2026-72798
SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases ...
CVE-2026-72798 SiYuan before v3.7.4 Information Disclosure via renderAttributeView
SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases ...
CVE-2026-72791 SiYuan before v3.7.4 Information Disclosure via getAttributeViewFieldViews
SiYuan v3.7.4-alpha.1 a pre-release; the endpoint does not exist in stable v3.7.3 or earlier contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role...
EUVD-2026-57451
SiYuan v3.7.4-alpha.1 a pre-release; the endpoint does not exist in stable v3.7.3 or earlier contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and applies no publish-access filtering, so reader-role...
CVE-2026-72791
SiYuan v3.7.4-alpha.1 contains an information-disclosure flaw in the /api/av/getAttributeViewFieldViews endpoint. The route is registered with CheckAuth only and lacks publish-access filtering, allowing reader-role callers to view the complete database view structure (view names, icons, layout ty...
CVE-2026-73331
CVE-2026-73331 : CamaleonCMS 2.9.1 contains an authenticated SQL injection via the post slug field. Authenticated users with post creation/edit privileges can submit a crafted slug containing SQL syntax that is evaluated by an inadequately parameterized query. Attack techniques described include ...
CVE-2026-73331 CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers c...
CVE-2026-73300
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...
CVE-2026-73300 Budibase: SQL Injection via `multipleStatements: true`
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...
CVE-2026-73300 Budibase: SQL Injection via `multipleStatements: true`
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...
EUVD-2026-57394
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...
CVE-2026-73300
CVE-2026-73300 affects Budibase (open-source low-code platform). The MySQL integration component before version 3.40.0 is configured with multipleStatements: true, enabling injection of multiple SQL statements via user input fields and potentially full database compromise. Mitigation: upgrade to ...
CVE-2026-73300 Budibase: SQL Injection via `multipleStatements: true`
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...
CGA-63GG-4323-JCXX
Bulletin has no description...
Exploits + Shellcode + GHDB v2026-08-12
The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...