CGA-P93W-CH77-3JV6

Bulletin has no description...

CGA-4FV5-C996-5H26

Bulletin has no description...

CGA-3764-Q237-9FC3

Bulletin has no description...

ECHO-B7FC-A7AC-F445

Bulletin has no description...

ECHO-41E0-1521-8B3D

Bulletin has no description...

MINI-5F3J-4H2F-HV7Q

Bulletin has no description...

MINI-W2FG-CWW6-798H

Bulletin has no description...

EUVD-2026-43955

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service...

GHSA-8PPF-4F7H-5PPJ pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

Impact The BER/CER/DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload tens of kilobytes containing an OID with many arcs consumes seconds of CPU per decode call, allowing denial of service in any application tha...

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

Impact The BER/CER/DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload tens of kilobytes containing an OID with many arcs consumes seconds of CPU per decode call, allowing denial of service in any application tha...

CVE-2026-47409

creationtimestamp| type| source ---|---|--- 2026-07-21 18:44:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6houl2rk2q...

CVE-2026-16451

creationtimestamp| type| source ---|---|--- 2026-07-21 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ha4qrux24...

CVE-2026-47408

creationtimestamp| type| source ---|---|--- 2026-07-21 18:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gy5caw624...

CVE-2026-24232

creationtimestamp| type| source ---|---|--- 2026-07-21 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b...

CGA-2472-75V9-7HGH

Bulletin has no description...

CVE-2026-47417 praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints POST /workspaces/workspaceid/issues/issueid/comments and GET .../comments gate access on requireworkspacememberworkspaceid...

CVE-2026-47413 praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The POST /workspaces/workspaceid/members endpoint is gated only by requireworkspacememberworkspaceid default minrole="member" an...

EUVD-2026-46320

Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The affected endpoints return presigned...

CVE-2026-64824

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-28313

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...