72349 matches found
CVE-2026-62218
creationtimestamp| type| source ---|---|--- 2026-07-17 02:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqdez4ne2l 2026-07-22 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr7zkz3jvo26...
GHSA-VWJC-V7X7-CM6G
creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...
CVE-2026-11740
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-45334
Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the content-locking feature returned lock information without checking the requesting user's access permissions. Kirby's Panel includes a content-locking feature that records which user currently has a model...
CVE-2026-55579
creationtimestamp| type| source ---|---|--- 2026-07-16 20:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqs4ly7n6q2w 2026-07-16 22:35:03+00:00| published-proof-of-concept| https://github.com/pheditor/pheditor/security/advisories/GHSA-p4h7-p9rj-2pq2 2026-07-17...
CVE-2026-47088
creationtimestamp| type| source ---|---|--- 2026-07-16 20:34:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3jia3bi2e...
GHSA-JPW9-PFVF-9F58
creationtimestamp| type| source ---|---|--- 2026-07-16 20:31:08+00:00| seen| https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb...
EUVD-2026-44795
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal...
GHSA-JPW9-PFVF-9F58 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...
CVE-2026-55584
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:31+00:00| seen| Telegram/LNuOwlUx2r8sHZb96-V-EdvdoeXbPnJG4sUQQILzuVbIDko 2026-07-17 00:00:48+00:00| seen| Telegram/LNuOwlUx2r8sHZb96-V-EdvdoeXbPnJG4sUQQILzuVbIDko 2026-07-18 04:00:03+00:00| published-proof-of-concept|...
CVE-2026-0000
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:26+00:00| seen| Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5Ni4r9-mJNxKuLM 2026-07-17 00:00:43+00:00| seen| Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5Ni4r9-mJNxKuLM 2026-07-18 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-63085
creationtimestamp| type| source ---|---|--- 2026-07-16 18:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvo47kg32s...
CVE-2026-45576
creationtimestamp| type| source ---|---|--- 2026-07-16 18:46:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvhepsbd2n 2026-07-21 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr6car56u322...
CVE-2026-45336
creationtimestamp| type| source ---|---|--- 2026-07-16 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrscyddbi2l 2026-07-16 19:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrxndfem52e...
CVE-2026-8312
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...
CVE-2026-59237
Roskus Prospero Flow CRM prior to 5.5.3 is affected by an IDOR (CWE-639) vulnerability in the Order and OrderItem REST API controllers. The issue arises because Order::find($id) / Item::find($id) are not scoped to the authenticated user’s company, enabling a remote, authenticated user to read, mo...
CVE-2026-59237 IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders
Authorization Bypass Through User-Controlled Key CWE-639 in the Order and OrderItem REST API controllers in Roskus Prospero Flow CRM before 5.5.3 allows a remote, authenticated user to read, modify, and delete orders and order items belonging to any other company tenant via a sequential numeric i...
MINI-QJX6-WMMV-QGPP
Bulletin has no description...