163 matches found
CVE-2026-12228
creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...
CVE-2026-48246
Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...
EUVD-2026-31327
Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...
CVE-2026-48246 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...
CVE-2026-48246
CVE-2026-48246 affects Open ISES Tickets prior to version 3.44.2. The issue is that TLS certificate verification is disabled for outbound HTTPS requests in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false and not configuring CURLOPT_SSL_VERIFYHOST during Google Maps Directions API look...
PT-2026-42524
Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT SSL VERIFYPEER to false and not setting CURLOPT SSL VERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...
PT-2026-29274
Content removed...
CVE-2022-49127
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
GHSA-F6H3-846H-2R8W
creationtimestamp| type| source ---|---|--- 2026-03-04 19:10:06+00:00| seen| https://gist.github.com/alon710/f295c676693170b5c20cb1fc935e8ee8...
CVE-2016-1182
creationtimestamp| type| source ---|---|--- 2026-02-11 12:49:28+00:00| seen| https://gist.github.com/kitherill/35c9211065676c6c258f3a3f1d76a26d...
CVE-2026-2077
A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function addRole/updateRole/deleteRole of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role...
CERT.pl Energy Sector Incident 29 December
This is the official report from CERT.pl on the coordinated attacks against Poland's energy sector. These events affected both information systems IT and physical industrial equipment OT, which is rarely observed in attacks reported publicly to date...
CVE-2022-31956
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...
CVE-2026-22245
creationtimestamp| type| source ---|---|--- 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc 2026-01-08 18:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwn7ilf3x2e 2026-01-14 04:11:58+00:00| seen|...
CVE-2025-52863
creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM...
CVE-2025-67073
creationtimestamp| type| source ---|---|--- 2025-12-17 19:23:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736536175433354 2025-12-17 23:16:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7s5vbpwt2m 2026-01-02 21:51:48+00:00| published-proof-of-concept|...
CVE-2024-53684
creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:11+00:00| seen| https://infosec.place/objects/fcc180c5-bea6-4b5b-bec5-f92b23b88c85 2025-12-05 12:38:47+00:00| seen| https://gist.github.com/Darkcrai86/429c8f390841b2dff6c0c47a3c6ff82b...
Malicious code in @louisle2/cortex-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444e50876d5f75647d843c02c0b22a893e1129c31baca504e57985a07a2f5bb The package @louisle2/cortex-js was found to contain malicious code. Source: ghsa-malware...