72257 matches found
MINI-G646-FH2R-WJWG
Bulletin has no description...
CVE-2026-65907
creationtimestamp| type| source ---|---|--- 2026-07-23 13:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116969533025380702 2026-07-23 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcx3efa542r 2026-07-23 15:02:05+00:00| seen|...
CVE-2026-65912 DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR
DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...
CVE-2026-65455
creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwqelee2v...
CVE-2026-64142
creationtimestamp| type| source ---|---|--- 2026-07-23 12:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcrzkrruz2k...
CVE-2026-60158
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...
CVE-2026-60160
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...
CVE-2026-60150
creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
PYSEC-2026-3482 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...
CVE-2026-64812
CVE-2026-64812 affects JetBrains IntelliJ IDEA prior to 2026.2. The vulnerability allows unauthorized input injection during a Remote Development session. Root cause details are not elaborated beyond the description; exploitation status and mitigation are not specified in the provided documents. ...
CVE-2026-64611
creationtimestamp| type| source ---|---|--- 2026-07-23 11:28:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrcqaxjpvx2z 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3344 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/bdufstecru/3344...
CVE-2026-65489
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...
MINI-8Q83-9WW4-HMC5
Bulletin has no description...
ECHO-D56E-2B48-3DD3
Bulletin has no description...
CVE-2026-16723
creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...
MINI-Q5M4-MM84-2JRX
Bulletin has no description...
EUVD-2026-47934
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to insufficient escaping on the user-suppli...
BELL-CVE-2026-47063
Bulletin has no description...