58460 matches found
CVE-2026-12204
creationtimestamp| type| source ---|---|--- 2026-06-15 04:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocfmoby2d2m...
CVE-2026-12207 medkey-org medkey HTTP REST API PatientController.php actionGetPatientById resource injection
A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the function actionGetPatientById of the file app\modules\medical\port\rest\controllers\PatientController.php of the component HTTP REST API. The manipulation of the argument ID...
CVE-2026-47162
creationtimestamp| type| source ---|---|--- 2026-06-15 01:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n 2026-06-21 22:43:05+00:00| seen| https://bsky.app/profile/canartuc.com/post/3motgzrwjm222...
PT-2026-49199
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId ID/Audio/ and...
PT-2026-49202
Name of the Vulnerable Software and Affected Versions ash authentication versions 0.1.0 through 4.13.x ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.9 Description An authentication bypass by spoofing allows account takeover of local users during OAuth2 or OIDC sign-in. The issue occurs...
PT-2026-49215
WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...
MINI-82JQ-MQPJ-PJ6R
Bulletin has no description...
MINI-W9QM-324F-QQ2V
Bulletin has no description...
MINI-6GCP-H839-PQ8M
Bulletin has no description...
CVE-2026-54412
creationtimestamp| type| source ---|---|--- 2026-06-14 20:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobl44ylsv2f 2026-06-15 00:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5ha7xq2w...
CVE-2026-53807
creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamt2x672p...
CVE-2026-47965
creationtimestamp| type| source ---|---|--- 2026-06-14 01:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7kywnwup2y...
SUSE SLES15 Security Update : openssh (SUSE-SU-2026:2375-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2375-1 advisory. This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialize...
CVE-2025-55660
creationtimestamp| type| source ---|---|--- 2026-06-13 22:34:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7csmvpjk2f...
CVE-2025-55650
creationtimestamp| type| source ---|---|--- 2026-06-13 22:29:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo7cjnr6ds26...
Malicious code in @giftyhq/widget-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad3f12a6a12fbfa60e4a72747df6974f89906200568926b99a8c93c489b5e62 package.json declares "preinstall": "node index.js", which fires automatically on npm install. index.js collects host fingerprinting data —...
CVE-2026-54358
creationtimestamp| type| source ---|---|--- 2026-06-13 20:51:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116744774971353040...
MINI-67P3-C7XV-HR5X
Bulletin has no description...