72349 matches found
GHSA-VJC4-5QP5-M44J
creationtimestamp| type| source ---|---|--- 2026-07-21 07:31:35+00:00| seen| https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad...
CVE-2026-6952
creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...
EUVD-2026-46156
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier 'sid' as the password reset token store...
CVE-2026-13439
The CVE-2026-13439 entry affects the WordPress plugin Easy Form Builder by WhiteStudio up to version 4.0.11 , where the password-recovery flow relies on a publicly visible session identifier ('sid') as the reset token stored in wp_emsfb_temp_links, combined with a publicly accessible nonce refres...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
GHSA-8MV7-9C27-98VC
creationtimestamp| type| source ---|---|--- 2026-07-21 03:31:30+00:00| seen| https://gist.github.com/alon710/3baf3d34c51a96bcd4a3b1906aa0d17c...
CVE-2026-59776
Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...
MINI-VQ9V-28RC-7PJ9
Bulletin has no description...
MINI-P8PJ-3VG7-63V4
Bulletin has no description...
MINI-VRPW-46Q4-29PM
Bulletin has no description...
MINI-XRX7-CJ3R-6382
Bulletin has no description...
MINI-J24J-3F8G-RR5H
Bulletin has no description...
MINI-2FM7-994M-VH94
Bulletin has no description...
MINI-M8QG-PFJP-8832
Bulletin has no description...
MINI-549R-59QR-3WJR
Bulletin has no description...
MINI-X89H-3MCG-3362
Bulletin has no description...
MINI-C629-P3FF-9Q69
Bulletin has no description...
MINI-38VW-H3FJ-567Q
Bulletin has no description...
GHSA-WM3W-8RRP-J577
creationtimestamp| type| source ---|---|--- 2026-07-21 01:31:18+00:00| seen| https://gist.github.com/alon710/84075b1c42ed77e39cb61a3601f10615...
rabbitmq-server: RabbitMQ: Authorization bypass via regular expression injection in MQTT client ID
A flaw was found in RabbitMQ. An authenticated MQTT Message Queuing Telemetry Transport user can bypass topic-level authorization by injecting regular expression operators. This occurs because the client ID, provided by the user in the MQTT CONNECT packet, is inserted into authorization regex...