72257 matches found
CVE-2026-60379
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflgliea52z 2026-07-29 03:37:06+00:00| seen|...
CVE-2026-60374
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxfcvfgh2j 2026-07-29 15:37:06+00:00| seen|...
CVE-2026-65906
creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j 2026-08-18 15:50:05+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624...
CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...
CVE-2026-61175
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdqyu3n2v 2026-07-23 18:16:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60301
creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60271
creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60252
creationtimestamp| type| source ---|---|--- 2026-07-23 16:49:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60143
creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-46999
creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-65917
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference IDOR vulnerability in the IncBackups application's incremental-backup handlers deleteBackup, fetchRestorePoints, and restorePoint that allows authenticated panel users to access or manipulate other...
EUVD-2026-48300
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-15617
CVE-2026-15617 affects Logto Identity Platform: during SSO, the system performs strict, unnormalized comparisons of identity attributes (email, issuer, identity IDs), allowing sessions to bind to unintended local accounts due to case/whitespace/Unicode differences. This can enable unauthorized ac...
ECHO-5D9D-AAA9-D093
Bulletin has no description...
ECHO-76FC-8CCD-D030
Bulletin has no description...