72348 matches found
CVE-2026-16451
creationtimestamp| type| source ---|---|--- 2026-07-21 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ha4qrux24...
CVE-2026-47408
creationtimestamp| type| source ---|---|--- 2026-07-21 18:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gy5caw624...
CVE-2026-24232
creationtimestamp| type| source ---|---|--- 2026-07-21 18:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gr6jdha2b...
CGA-2472-75V9-7HGH
Bulletin has no description...
CVE-2026-47417 praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints POST /workspaces/workspaceid/issues/issueid/comments and GET .../comments gate access on requireworkspacememberworkspaceid...
CVE-2026-47413 praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The POST /workspaces/workspaceid/members endpoint is gated only by requireworkspacememberworkspaceid default minrole="member" an...
EUVD-2026-46320
Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The affected endpoints return presigned...
CVE-2026-64824
creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...
CVE-2026-28313
creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...
CVE-2026-28308
creationtimestamp| type| source ---|---|--- 2026-07-21 16:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ac5ttqj2v 2026-07-26 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrlacu7ll72l...
CVE-2026-28305
creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6k36ek2s 2026-07-26 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl3bvzuid2y...
CVE-2026-47399
Summary of vulnerability (CVE-2026-47399): PraisonAI Platform prior to version 0.1.4 exposes a systemic object-level authorization flaw where workspace-scoped REST routes verify only that a caller is in the URL workspace, but the service layer resolves objects (e.g., agents, projects, issues, com...
libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
ECHO-29F5-C1F8-003E
Bulletin has no description...
CVE-2026-16409
creationtimestamp| type| source ---|---|--- 2026-07-21 14:11:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5ygguaqe2l 2026-07-21 14:17:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5yrlkd2c2s 2026-07-22 04:47:55+00:00| seen|...
MINI-QJ9M-4WV5-P65W
Bulletin has no description...
MINI-52XM-2XHJ-6C7H
Bulletin has no description...
MINI-47PV-PH27-XVXC
Bulletin has no description...