23662 matches found
CVE-2026-45811 Apache NimBLE: Buffer overflow in socket HCI transport
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...
CVE-2026-45811
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Apache NimBLE. The HCI socket transport did not check whether a received HCI event would fit the configured event pool before copying it, allowing a buffer overflow. Severity is low: exploitation requires either...
PYSEC-2025-194
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
EUVD-2026-48550
The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.14. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to grant EventON...
WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Event Tickets versions = 5.29.0.1...
CVE-2026-12981
creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...
SolarWinds Security Event Manager - Unauthenticated RCE
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...
PT-2026-64434
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An authenticated recipient of a single-file share can access file-activity metadata for other files and folders located in the owner's parent folder that were not intended to be shared. This occur...
GHSA-8QQM-FP2Q-V734
creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...
CVE-2026-60917
creationtimestamp| type| source ---|---|--- 2026-07-23 17:49:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60852
creationtimestamp| type| source ---|---|--- 2026-07-23 17:48:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60772
creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60325
creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-46993
creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:40+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrmxn4eu5m2m...
CVE-2026-60158
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...
CVE-2026-60160
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...
PYSEC-2026-3528 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
Summary The SSE Server-Sent Events server in src/praisonai-agents/praisonaiagents/server/server.py exposes a /publish endpoint that broadcasts arbitrary messages to all connected clients without any authentication. The ServerConfig dataclass line 24 defines an authtoken field, but this token is...
EUVD-2026-48097
Unauthenticated Broken Access Control in Event post = 6.0.1 versions...
