64873 matches found
CVE-2026-51081
creationtimestamp| type| source ---|---|--- 2026-07-17 18:08:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudskgx3r24...
CVE-2026-14871
creationtimestamp| type| source ---|---|--- 2026-07-17 17:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud7ma5eq2g...
CVE-2024-23575
creationtimestamp| type| source ---|---|--- 2026-07-17 17:51:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqucusonlo2e...
CVE-2026-63101
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...
CVE-2026-8297
creationtimestamp| type| source ---|---|--- 2026-07-17 17:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquav5hp4i2y 2026-07-17 18:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugmuo42o2e 2026-07-19 08:00:51+00:00| seen|...
CVE-2026-50526
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
CVE-2026-14741
creationtimestamp| type| source ---|---|--- 2026-07-17 15:54:22+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqu4cyiggo2n...
CVE-2026-12715
CVE-2026-12715 describes a missing authorization flaw in Google Cloud Firebase Studio for versions prior to 2026-04-15, enabling an attacker to download other users’ deployed source code and access sensitive data via unauthorized Google Cloud Storage URL signing requests. The issue has a high imp...
CVE-2026-16009
creationtimestamp| type| source ---|---|--- 2026-07-17 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtz26l66x2b...
CVE-2026-16014
creationtimestamp| type| source ---|---|--- 2026-07-17 14:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtyibeiek2g...
CVE-2026-16072
A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...
GHSA-FF9G-85JQ-R3G3
creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317 2026-07-18 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317...
CVE-2026-9494
An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...
CVE-2026-8396
creationtimestamp| type| source ---|---|--- 2026-07-17 13:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtvkg25eb2x 2026-07-19 12:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyq7hygfj23...
CVE-2026-16072
CVE-2026-16072 affects Keycloak’s organization management component. A delegated administrator with org-management permissions can create an invitation for a non-existent email address and then fetch the secret registration link via the API, enabling creation of new user accounts and their additi...
CVE-2026-16072
A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...
EUVD-2024-55659
HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...
CVE-2026-15094
creationtimestamp| type| source ---|---|--- 2026-07-17 11:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtonqazmg2d 2026-07-21 06:00:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15094.yaml 2026-07-22...
CVE-2026-8075
Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...