MINI-JRWV-RVM3-FWCW

Bulletin has no description...

CVE-2026-76608 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik 4.7.2 - The onGetEmail endpoint did not perform any access checks...

CVE-2026-76599

CVE-2026-76599 affects the Fabrik Joomla Extension in versions below 4.7.2 . The ajax_tables method of the elements model allows an unauthenticated attacker to list arbitrary database tables, including their column definitions, and to disclose the database table prefix. This information disclosur...

CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik 4.7.2 - The ajaxtables method of the elements model allows listings of arbitrary database tables including columns...

EUVD-2026-64316

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik 4.7.2 - The ajaxtables method of the elements model allows listings of arbitrary database tables including columns...

CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik 4.7.2 - The ajaxtables method of the elements model allows listings of arbitrary database tables including columns...

MINI-JCQ4-GR8M-H8WF

Bulletin has no description...

CVE-2016-1345

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:22+00:00| seen| https://t.me/informationsec/850 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/850 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/850...

CVE-2016-2163

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/872 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/872 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/872...

CVE-2016-2516

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:34+00:00| exploited| https://t.me/informationsec/975...

CVE-2016-2106

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/987 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/987...

CVE-2016-2517

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:34+00:00| exploited| https://t.me/informationsec/975...

CVE-2016-2176

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/987 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/987...

CVE-2016-3989

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1130 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1130...

CVE-2016-5133

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1198 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1198...

CVE-2020-0687

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:15+00:00| seen| https://t.me/informationsec/2861 2026-08-23 00:00:37+00:00| seen| https://t.me/informationsec/2861...

CVE-2026-77001

creationtimestamp| type| source ---|---|--- 2026-08-22 13:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117139401813989361 2026-08-22 13:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtof2qgwpd27 2026-08-23 16:30:05+00:00| seen|...

CVE-2026-60083

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-56380

AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. Attackers can enumerate all creator email addresses by iterating through...

EUVD-2026-64268

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...