Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through insufficient authorization checks in the postMemberAction and postActivityAction API endpoints. An attacker can expand their management scope to add users or activities outside their authorized visibility b...

CSV Injection

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection through the postActivityReport process. An attacker can cause arbitrary formula execution in spreadsheet software by injecting a specially crafted User-Agent...

CVE-2026-44967

creationtimestamp| type| source ---|---|--- 2026-06-27 16:07:36+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbtqau2xk2b 2026-06-27 16:07:37+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbtqbhhhg2h 2026-06-27 16:07:37+00:00| seen|...

CVE-2026-42315

creationtimestamp| type| source ---|---|--- 2026-04-27 08:09:32+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-838g-gr43-qqg9 2026-05-11 18:24:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhstyvk2c 2026-05-11...

EUVD-2026-25348

A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continu...

CVE-2026-29146

creationtimestamp| type| source ---|---|--- 2026-04-09 21:01:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mj3pckzmjc2j 2026-04-09 22:48:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3vcs73fa25 2026-04-09 23:23:44+00:00| seen|...

CVE-2025-12805

creationtimestamp| type| source ---|---|--- 2026-03-26 22:21:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhynbhwrsw2j 2026-03-26 22:22:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyncg4j2v2s 2026-03-26 22:48:16+00:00| seen|...

GHSA-HGQP-3MMF-7H8F

creationtimestamp| type| source ---|---|--- 2025-06-21 05:34:22+00:00| seen| https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3ls3te744yuq2 2025-06-23 23:32:45+00:00| seen| https://seclists.org/oss-sec/2025/q2/273 2025-06-23 23:32:45+00:00| seen|...

CVE-2025-27029

creationtimestamp| type| source ---|---|--- 2025-06-03 06:10:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomz2g7dzi2 2025-06-03 07:02:50+00:00| seen| Telegram/nDhNVEhmvZIxYTtacE8UXyVpkRuXz6-IMlNNEAsJoFxRkd8 2025-06-03...