58460 matches found
CVE-2026-47222
creationtimestamp| type| source ---|---|--- 2026-06-12 18:34:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4ewnlj6f2b...
CVE-2026-10715 Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary postid to POST /admin/posttype//drafts and overwrite the draft associated with another user's post...
CVE-2026-10715 Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary postid to POST /admin/posttype//drafts and overwrite the draft associated with another user's post...
CVE-2026-47248 Parse Server: GraphQL "Did you mean" validation suggestions disclose schema to unauthenticated callers
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.78 and 9.9.1-alpha.2, Parse Server's GraphQL endpoint discloses schema metadata to unauthenticated callers through Did you mean ...? suggestions embedded in GraphQL...
katex-xss-test
KaTeX render test Inline href: $\hrefjavascript:alertdocume...
CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a...
MINI-4H69-947M-47WW
Bulletin has no description...
MINI-2GQ4-JR42-FVMR
Bulletin has no description...
CVE-2026-50009
Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the...
CVE-2026-50009
Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the...
UBUNTU-CVE-2026-50009
Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the...
CVE-2017-20240
creationtimestamp| type| source ---|---|--- 2026-06-12 14:15:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3whv6i542r...
CVE-2026-47197
creationtimestamp| type| source ---|---|--- 2026-06-12 13:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3u265rbw2q...
GHSA-XM63-5PJX-VRHP vulnerabilities
Vulnerabilities for packages: busybox...
CGA-72J5-497F-56J2
Bulletin has no description...
CVE-2026-50629
The CVE-2026-50629 issue affects Apache CXF’s OAuth2 server where the 'clientId' from HTTP requests is concatenated into log warning messages without sanitizing control characters. This creates log injection risk by allowing arbitrary content in logs. Root cause: unsanitized control characters in...
MINI-V6C9-7JVR-VQPV
Bulletin has no description...
GHSA-MFW4-FC92-PWX6 vulnerabilities
Vulnerabilities for packages: chromium...