312741 matches found
CVE-2026-75928 Brushfire unauthenticated information disclosure
The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...
CVE-2026-75928
The Brushfire platform's video content streaming application (online.brushfire.com) contains an information disclosure vulnerability where database paths are exposed in HTTP requests to users. This allows a remote, unauthenticated attacker to read information about other users. The CVSS v3.1 base...
CVE-2026-77812
creationtimestamp| type| source ---|---|--- 2026-08-21 16:09:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5iryhm525 2026-08-21 16:17:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7fqla4tukg6mz 2026-08-21 18:55:27+00:00| seen|...
CVE-2026-62941
creationtimestamp| type| source ---|---|--- 2026-08-21 16:09:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5hmwign25 2026-08-21 19:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmioyjyjj24 2026-08-21 22:20:05+00:00| seen|...
CVE-2026-62940
creationtimestamp| type| source ---|---|--- 2026-08-21 16:08:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5he653y25 2026-08-21 19:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmiox4odb24 2026-08-21 22:30:05+00:00| seen|...
CVE-2026-62867
creationtimestamp| type| source ---|---|--- 2026-08-21 16:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5gztobb2f 2026-08-21 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmi52tp4f2p 2026-08-21 22:20:03+00:00| seen|...
MINI-MWC5-7MX3-V5CG
Bulletin has no description...
MINI-C9Q3-9C77-H2XX
Bulletin has no description...
MINI-W6G6-2PQF-QHG7
Bulletin has no description...
[SECURITY] [DLA 4750-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4750-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2026 https://wiki.debian.org/LTS -...
MINI-M53W-J9GH-78WW
Bulletin has no description...
Brushfire unauthenticated information disclosure
RISK EVALUATION The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. 2. RECOMMENDED PRACTICES Fixed February 2026. 3. DESCRIPTION...
CVE-2026-77806
creationtimestamp| type| source ---|---|--- 2026-08-21 14:18:33+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtlxbv445k2m 2026-08-21 16:07:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5efvzfp2c 2026-08-21 16:59:21+00:00| seen|...
CVE-2026-66582
creationtimestamp| type| source ---|---|--- 2026-08-21 14:06:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtlwmpi4ck2o 2026-08-21 14:06:44+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117133882319199310...
CVE-2026-75946
A local privilege escalation vulnerability exists in HP OMEN Gaming Hub versions prior to 1101.2608.0.0 , caused by insufficient access controls . A local attacker with low privileges could exploit this to gain elevated access and potentially access confidential information. The CVSS 4.0 base sco...
CVE-2026-75946 OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure
A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
CVE-2026-76611
Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo 4.1.66...
CVE-2026-47827
creationtimestamp| type| source ---|---|--- 2026-08-21 13:08:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtlteoepai2z...
CVE-2026-19848
The ProfilePress WordPress plugin before 4.17.1 does not strip shortcodes from two of its profile fields before rendering them on public pages, allowing unauthenticated attackers to store shortcodes that are then executed when the page is viewed, disclosing a chosen user's email address, login an...
