72364 matches found
PT-2026-60097
Name of the Vulnerable Software and Affected Versions nebula-mesh affected versions not specified Description The web handler renderMobileBundle passes a pki.CAResolver to the mobilebundle.Build function, which decrypts the CA's ed25519 private key into a pki.CAManager. However, the Build functio...
CVE-2026-62188
creationtimestamp| type| source ---|---|--- 2026-07-13 23:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqktx6xbvt27...
CVE-2026-13039
creationtimestamp| type| source ---|---|--- 2026-07-13 23:24:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktmni3so2c...
CVE-2026-62197
creationtimestamp| type| source ---|---|--- 2026-07-13 22:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkricfkio2z...
CVE-2026-62192
creationtimestamp| type| source ---|---|--- 2026-07-13 22:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrbdxlxy2t...
CVE-2026-58102
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hvexts. When building the extension hash via extensions, extensionsbylongname, extensionsbyoid, or hasextensionoid, the code passes OBJobj2txt's return value as the hash-key...
CVE-2026-36214
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-15 00:00:31+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-16 12:00:07+00:00| seen|...
CVE-2026-52100
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-15 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92641 2026-07-16 19:00:15+00:00| seen|...
GHSA-QV97-83W4-FF86
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92598 2026-07-16 19:00:15+00:00| seen|...
CVE-2026-56877
The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...
CVE-2026-56877
The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...
CVE-2026-58408
creationtimestamp| type| source ---|---|--- 2026-07-13 21:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoajc22s2k...
CVE-2026-26396
creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqklm5ggqj2d...
CVE-2026-55773
creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkllwplkm2l 2026-07-13 21:57:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoqqunqx2l...
CVE-2026-58410 ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records
ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to read and modify other families’ records. An authenticated non-admin user with EditSelf access can supply another...
CVE-2026-58410 ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records
ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to read and modify other families’ records. An authenticated non-admin user with EditSelf access can supply another...
CVE-2026-55771
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals has inverted null/self branches which could lead to incorrect equality comparisons. The EntityIdentifier.equals meth...
CVE-2026-57797
creationtimestamp| type| source ---|---|--- 2026-07-13 19:49:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhl2ahsu2c 2026-07-16 08:09:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrukxm732n...
CVE-2026-14906
creationtimestamp| type| source ---|---|--- 2026-07-13 19:43:18+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkhap3uhf2c 2026-07-15 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovtojixm2h 2026-08-13 13:10:03+00:00| seen|...