41693 matches found
PT-2026-35946
Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication Path Traversal issue allows an authenticated attacker to interact with services that are typically restricted. Path Traversal is a flaw that enables attackers to access...
CVE-2026-6551
creationtimestamp| type| source ---|---|--- 2026-04-28 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mklqnmviap2a 2026-04-29 13:44:53+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mknaapny5o2u...
FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field
Summary The application fails to validate the nick parameter during a POST request to the EditUser controller. Although the UI prevents editing this field, a user can bypass this restriction using a proxy to rename any account including the Administrator. This leads to Broken Access Control and...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass through improper validation of the nick parameter in the user update process. An attacker can modify immutable account identifiers by intercepting and altering POST requests, potentially sabotaging audit trails,...
CVE-2026-6725
creationtimestamp| type| source ---|---|--- 2026-04-28 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mklnccr3il2s...
CVE-2026-6809
creationtimestamp| type| source ---|---|--- 2026-04-28 21:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkljx26xtb2a 2026-04-29 12:00:56+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mkn2gu2p6b2u...
CVE-2026-7290
creationtimestamp| type| source ---|---|--- 2026-04-28 21:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklja2whsq2k...
CVE-2026-7295
creationtimestamp| type| source ---|---|--- 2026-04-28 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklif7mghe2r...
CVE-2026-42423
creationtimestamp| type| source ---|---|--- 2026-04-28 20:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklh6xa6y52k...
CVE-2026-42427
creationtimestamp| type| source ---|---|--- 2026-04-28 20:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgm32tgw2i...
CVE-2026-7292
creationtimestamp| type| source ---|---|--- 2026-04-28 20:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgendiy32c...
CVE-2026-7355
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:47:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklusetkht2e 2026-05-03 18:00:00+00:00| seen|...
CVE-2026-7353
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:25:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltlkzkqo2o 2026-05-03 18:00:00+00:00| seen|...
CVE-2026-42486
creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...
offensive-security-labs
Offensive Security Labs — Penetration Testing on a Fictional T...
CVE-2026-39463
creationtimestamp| type| source ---|---|--- 2026-04-28 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkl4juzge52s...
CVE-2026-7282
creationtimestamp| type| source ---|---|--- 2026-04-28 17:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl3j2nq5g2r...
CVE-2026-7288
creationtimestamp| type| source ---|---|--- 2026-04-28 16:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzyjfb672r 2026-04-28 16:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2irbp352e 2026-05-28 10:07:15+00:00| seen|...
CVE-2026-7322
creationtimestamp| type| source ---|---|--- 2026-04-28 16:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkztxjzyk2i 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...