41095 matches found
CVE-2026-70617
Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...
CVE-2026-70617 Spacebar Server Missing Authorization via Group DM Recipient Endpoint
Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...
CVE-2026-20312
creationtimestamp| type| source ---|---|--- 2026-08-05 18:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4avokdr2t 2026-08-05 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76v5c3vhzde4z 2026-08-06 13:10:12+00:00| seen|...
CVE-2026-9192
creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu5srge2f 2026-08-06 16:15:51+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-8709
creationtimestamp| type| source ---|---|--- 2026-08-05 17:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzqlgrfd2m 2026-08-06 16:15:47+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-7557
creationtimestamp| type| source ---|---|--- 2026-08-05 17:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzn25ytt2h 2026-08-06 16:15:44+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-7329
creationtimestamp| type| source ---|---|--- 2026-08-05 17:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzmyv47p2b 2026-08-06 12:43:03+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msg2xcrimm2x 2026-08-06 16:15:42+00:00| seen|...
CVE-2026-15573
creationtimestamp| type| source ---|---|--- 2026-08-05 16:59:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdytdptqw22 2026-08-05 23:02:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117045393405816451 2026-08-05 23:02:49+00:00| seen|...
CVE-2026-12410
creationtimestamp| type| source ---|---|--- 2026-08-05 16:57:47+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdypuyg4422...
CVE-2026-20303
creationtimestamp| type| source ---|---|--- 2026-08-05 16:51:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24 2026-08-05 17:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse26vdjur2s 2026-08-05 18:01:06+00:00| seen|...
CVE-2026-60023
creationtimestamp| type| source ---|---|--- 2026-08-05 15:49:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4c2kiitqv5xnt...
CVE-2026-50749
creationtimestamp| type| source ---|---|--- 2026-08-05 15:43:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhbopx5ltrfbd...
CVE-2026-48834
creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...
CVE-2026-14869
creationtimestamp| type| source ---|---|--- 2026-08-05 15:00:06+00:00| seen| https://t.me/thehackernews/9717 2026-08-06 00:00:33+00:00| seen| https://t.me/thehackernews/9717 2026-08-29 20:00:06+00:00| seen| https://t.me/CyberDispatch/2484 2026-08-30 00:00:37+00:00| seen|...
CVE-2026-61484
creationtimestamp| type| source ---|---|--- 2026-08-05 14:42:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2wgyu63gboz4...
CVE-2026-39923 Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset
Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...
CVE-2026-16443
creationtimestamp| type| source ---|---|--- 2026-08-05 14:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jb5m44hrlhlib 2026-08-06 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-26 00:40:05+00:00| seen|...
CVE-2026-15979
The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...
MAL-2026-12669 Malicious code in dbk-ui-forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6972ca0999559f2a4548843790c8000451acb4869da3c83d0357a655586ba On npm install, the package's preinstall hook runs index.js which collects host identity hostname, username, homedir, network interfaces, uid, output...