65904 matches found
CVE-2026-50136 Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials
Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the recaptcha middleware and does not require...
CVE-2026-50132 Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase
Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...
CVE-2026-50132 Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase
Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...
CVE-2026-50132 Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase
Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint no auth required that performs a permanent, state-changing operation: it binds an external chat identity Slack/Discord/MS Teams to an authenticated Budibase user accoun...
GHSA-4C8J-MGM4-QQVP Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing
Summary The remark42 image proxy fetches an arbitrary remote URL and re-serves the response from remark42's own origin. The download path decides whether the fetched resource is an image by looking only at the Content-Type header the remote server claims — it never inspects the actual bytes. The...
CVE-2026-54557
creationtimestamp| type| source ---|---|--- 2026-06-26 19:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ns2ae3e2q...
CVE-2020-14332
creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...
CVE-2019-14846
creationtimestamp| type| source ---|---|--- 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/c9d486870f097a37ad0c877eb49cb557 2026-06-26 19:02:21+00:00| seen| https://gist.github.com/tu-trinh-scale/a9fb67eb63f86c81b9a4dd4dbc64a2b2 2026-07-02 02:03:21+00:00| seen|...
CVE-2026-57231
creationtimestamp| type| source ---|---|--- 2026-06-26 18:42:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lwuwflj26 2026-06-27 10:46:02+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mpbbr7oncd2v 2026-06-29 12:05:52+00:00| seen|...
CVE-2025-32423
creationtimestamp| type| source ---|---|--- 2026-06-26 18:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lgngomo2c...
CVE-2026-47206
creationtimestamp| type| source ---|---|--- 2026-06-26 18:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7l5zmofk2i...
CVE-2025-32394
creationtimestamp| type| source ---|---|--- 2026-06-26 18:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kta7ha52p...
EUVD-2026-39832
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker with write access to a shared workspace to execute a PowerShell script in another user's context via a display name...
CVE-2026-13372
The CVE-2026-13372 vulnerability affects Devolutions Remote Desktop Manager 2026.2.5–2026.2.11, where incorrect link resolution by display name in the custom PowerShell VPN editor can enable an authenticated user with write access to a shared workspace to execute a PowerShell script in another us...
CVE-2026-45406
creationtimestamp| type| source ---|---|--- 2026-06-26 18:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kk7bms52n 2026-06-30 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mphr55hvyv24...
CVE-2026-57667
creationtimestamp| type| source ---|---|--- 2026-06-26 18:10:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7k4qx6ij2n 2026-06-30 14:17:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpj6xloow725...
CVE-2026-56062
creationtimestamp| type| source ---|---|--- 2026-06-26 17:45:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ir7e2qm2q...
CVE-2026-57636
creationtimestamp| type| source ---|---|--- 2026-06-26 17:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hk7hsot2p 2026-06-30 09:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpio6yxn6w2v...
CVE-2026-56064
creationtimestamp| type| source ---|---|--- 2026-06-26 17:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hdoavy42r 2026-08-01 03:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrykizm3ud2r...