EUVD-2026-64316

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik 4.7.2 - The ajaxtables method of the elements model allows listings of arbitrary database tables including columns...

CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik 4.7.2 - The ajaxtables method of the elements model allows listings of arbitrary database tables including columns...

MINI-2R6M-W99V-RQV3

Bulletin has no description...

MINI-JCQ4-GR8M-H8WF

Bulletin has no description...

CVE-2016-1345

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:22+00:00| seen| https://t.me/informationsec/850 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/850 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/850...

CVE-2016-2163

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/872 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/872 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/872...

CVE-2016-2516

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:34+00:00| exploited| https://t.me/informationsec/975...

CVE-2016-2106

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/987 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/987...

CVE-2016-2176

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/987 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/987...

CVE-2016-2517

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:34+00:00| exploited| https://t.me/informationsec/975...

CVE-2016-3989

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1130 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1130...

CVE-2016-5133

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1198 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1198...

CVE-2020-0687

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:15+00:00| seen| https://t.me/informationsec/2861 2026-08-23 00:00:37+00:00| seen| https://t.me/informationsec/2861...

CVE-2026-77001

creationtimestamp| type| source ---|---|--- 2026-08-22 13:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117139401813989361 2026-08-22 13:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtof2qgwpd27 2026-08-23 16:30:05+00:00| seen|...

CVE-2026-60083

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-56380

AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. Attackers can enumerate all creator email addresses by iterating through...

EUVD-2026-64268

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-60083 SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-56380

AVideo (through commit 9c39d8c8) contains an information exposure vulnerability in feed/index.php . The endpoint returns channel owner email addresses embedded in itunes:email and itunes:author RSS elements when a public channel name parameter is supplied. Because no authentication is required, a...

EUVD-2026-64259

AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. Attackers can enumerate all creator email addresses by iterating through...