13252 matches found
CVE-2026-78563
creationtimestamp| type| source ---|---|--- 2026-08-25 09:31:54+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a 2026-08-25 12:01:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y 2026-08-25 12:01:25+00:00| seen|...
CVE-2026-78566
creationtimestamp| type| source ---|---|--- 2026-08-25 09:30:32+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj2ktcbk2s...
CVE-2026-77131 Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...
CVE-2026-77131
CVE-2026-77131 affects the TYPO3 extension SYSSY – TYPO3 Monitoring & Security Checks (syssy). When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it, resulting in a cleartext transmission of sensitive data. Exploitation r...
CVE-2026-75930
creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75930...
CVE-2026-74712
creationtimestamp| type| source ---|---|--- 2026-08-25 07:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvcd5iwj72p...
CVE-2026-74669
creationtimestamp| type| source ---|---|--- 2026-08-25 07:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvb7fyi562e...
CVE-2026-74665
creationtimestamp| type| source ---|---|--- 2026-08-25 07:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvb7ejpjx25...
CVE-2026-74662
creationtimestamp| type| source ---|---|--- 2026-08-25 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtvanku5xz2y 2026-09-04 12:35:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muoy24g4c32a...
CVE-2026-74617
creationtimestamp| type| source ---|---|--- 2026-08-25 06:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtva3of3hg2c...
CVE-2026-74597
creationtimestamp| type| source ---|---|--- 2026-08-25 06:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv6xubjoc25...
CVE-2026-74587
creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u4zxvj2f...
CVE-2026-74586
creationtimestamp| type| source ---|---|--- 2026-08-25 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv5u3hm5a23 2026-09-09 16:00:06+00:00| seen| Telegram/idrq8GCshAndCL-cMA1Uoj2VzIrne5jNTdbo8AkO8RR-nM 2026-09-09 16:00:07+00:00| published-proof-of-concept|...
Duplicate Advisory: Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xjw5-q542-3vmr. This link is maintained to preserve external references. Original Description Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block acce...
Duplicate Advisory: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p597-crqc-m349. This link is maintained to preserve external references. Original Description Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowi...
CVE-2026-72702
creationtimestamp| type| source ---|---|--- 2026-08-25 03:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtutsbu6id25 2026-08-25 04:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzzyhhc2c 2026-08-25 04:30:24+00:00| seen|...
CVE-2026-78682
creationtimestamp| type| source ---|---|--- 2026-08-25 02:32:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jncnsizlxkj4d 2026-09-01 13:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhk3wgcdl2f 2026-09-08 18:35:23+00:00| published-proof-of-concept|...
CVE-2026-78683
creationtimestamp| type| source ---|---|--- 2026-08-25 02:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqytwvum2e 2026-08-25 02:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6kw3zehwcdngz 2026-08-25 04:08:25+00:00| seen|...
CVE-2026-56710
creationtimestamp| type| source ---|---|--- 2026-08-25 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqgxw2sc2u 2026-08-25 04:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzjuvpw2p...
