58460 matches found
CVE-2026-50871
creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:36+00:00| seen| https://gist.github.com/pyuysig/01f00b5d7575f5a776b1f132ef9ecb46...
CVE-2026-39197
creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:32+00:00| seen| https://gist.github.com/pyuysig/221e90dd598ab3f3c3100ae59db8e8d4...
CVE-2026-12174
creationtimestamp| type| source ---|---|--- 2026-06-13 05:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116741210849212111 2026-06-13 23:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo7faoanvg2o 2026-06-14 03:00:25+00:00| seen|...
CVE-2026-54229
creationtimestamp| type| source ---|---|--- 2026-06-13 05:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo5kc74kqz22 2026-06-13 06:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo5oi7fhpd2b...
CGA-WFP9-7CRF-VM4F
Bulletin has no description...
GHSA-F577-QRJJ-4474 vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2026-53608
creationtimestamp| type| source ---|---|--- 2026-06-13 01:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo53gzquxw23 2026-06-13 03:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5bagbhzb2p 2026-07-31 22:35:03+00:00| published-proof-of-concept|...
Linux Distros Unpatched Vulnerability : CVE-2026-12143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field argument to FormDataappend and the filename optio...
CVE-2026-45013
creationtimestamp| type| source ---|---|--- 2026-06-12 22:34:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4sdo46cm2j...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...
Cross-site Scripting (XSS)
Overview @apostrophecms/seo is a SEO Tools for ApostropheCMS Affected versions of this package are vulnerable to Cross-site Scripting XSS via the injection of unsanitized values from the seoGoogleTrackingId and seoGoogleTagManager fields into the contents of a tag. A user with editor-level access...
ECHO-409F-CC93-6FFC
Bulletin has no description...
EUVD-2026-36577
A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharinggroupid to a sharing group they were not authorized to use. When distribution was set to sharing group distribution, the...
EUVD-2026-36572
An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was populated using the attacker-controlled AuthKey.userid value from the submitted request data. An authenticated user with...
CVE-2026-54360 MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups
A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before saving the submitted data. In CakePHP, supplying a primary key in the save data can cause a create followed by save...
CVE-2026-47248
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.78 and 9.9.1-alpha.2, Parse Server's GraphQL endpoint discloses schema metadata to unauthenticated callers through Did you mean ...? suggestions embedded in GraphQL...
MAL-2026-5703 Malicious code in eslint-plugin-mistica-local-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d21f50741178986b63d1f330373131c2f3f502a5b94e76ca921ce185fab123 package.json declares a preinstall hook that runs index.js automatically on npm install. index.js collects host identity os.hostname, os.platform,...