CGA-7QJV-JH75-HCJ9

Bulletin has no description...

MINI-RFG4-62MF-J62H

Bulletin has no description...

CVE-2026-74018

creationtimestamp| type| source ---|---|--- 2026-08-20 14:09:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgdd73qh2t 2026-08-20 14:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjgvo56pl2u...

CVE-2026-76634 WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php

WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an idpessoa parameter through a request extraction function that overwrites the session-derived...

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch...

Authorization Bypass Through User-Controlled Key

Overview org.springframework.data:spring-data-rest-core is a Spring Data REST. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the PATCH process. An attacker can overwrite identifier and version properties by sending crafted RFC 6902 JSON...

CVE-2026-76240

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a schema name were derived from tenant, request, or user input...

CVE-2026-76240 stigmem Postgres SQL Injection via Schema Identifier

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a schema name were derived from tenant, request, or user input...

CVE-2026-76240 stigmem Postgres SQL Injection via Schema Identifier

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a schema name were derived from tenant, request, or user input...

CVE-2026-76240

stigmem-node 0.9.0a1 contains a SQL injection vulnerability in its Postgres backend. Schema identifiers are interpolated into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a schema name...

CGA-6MPM-7C23-FW8V

Bulletin has no description...

CGA-29X8-XVVM-6F5H

Bulletin has no description...

BIT-KIBANA-2026-72680 Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification

Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belongs to another user. As a result, an...

BIT-ELK-2026-72680 Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification

Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belongs to another user. As a result, an...

BIT-ELASTICSEARCH-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

CVE-2026-70980

creationtimestamp| type| source ---|---|--- 2026-08-19 07:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtga3iytc32e 2026-08-19 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-26 00:37:07+00:00| seen|...

Malicious code in tfjs-inference (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ebb387c7f1f9bb3e96df6f8006cabc9141ddd1da35a58bfc14b42f2f6864eb The package name typosquats TensorFlow.js and its npm postinstall lifecycle script collects installer host identifiers hostname, platform, arch,...

CVE-2026-76344: Path Traversal: 'dir/../../filename'

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary location on the host by supplying a crafted search identifier to a Representational State Transfer REST API endpoint a...

PT-2026-79871

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the...

PT-2026-79297

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions prior to 2.12.1 Description This issue occurs because the software fails to regenerate the session identifier during authentication and accepts a session identifier provided via a user-supplied request parameter. Th...