23242 matches found
CVE-2026-60095
creationtimestamp| type| source ---|---|--- 2026-07-09 20:19:18+00:00| seen| https://bsky.app/profile/frycos.bsky.social/post/3mqahfdw4ws2q...
CVE-2026-61343
creationtimestamp| type| source ---|---|--- 2026-07-09 19:09:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqadjf7v5v2i 2026-07-13 22:00:05+00:00| seen| https://t.me/GithubRedTeam/92727 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92727 2026-07-15 00:00:36+00:00|...
CVE-2026-15308
creationtimestamp| type| source ---|---|--- 2026-07-09 17:55:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqa7dgwyrk24 2026-07-09 18:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqac5dfb5325 2026-07-10 14:00:26+00:00| seen|...
CVE-2026-11875
creationtimestamp| type| source ---|---|--- 2026-07-09 17:33:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa642jpjz2e...
CVE-2026-54801
creationtimestamp| type| source ---|---|--- 2026-07-09 16:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqa3tocizy2x 2026-07-10 14:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccogp5db24 2026-07-14 12:45:03+00:00| seen|...
PYSEC-2026-2962 Products.CMFPlone XSS in profile home_page property
A member of the Plone site could set javascript in the homepage property of their profile, and have this executed when a visitor clicks the home page link on the author page...
CVE-2026-59207
creationtimestamp| type| source ---|---|--- 2026-07-09 16:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zibfybn25...
CVE-2026-61474
creationtimestamp| type| source ---|---|--- 2026-07-09 16:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7zdryo4a2g...
CVE-2026-15188 manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control
A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProfileAPIView of the file accounts/api/views.py of the component Employee Dashboard Endpoint. This manipulation of the...
EUVD-2026-42606
A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProfileAPIView of the file accounts/api/views.py of the component Employee Dashboard Endpoint. This manipulation of the...
CVE-2026-15188
The CVE affects manjurulhoque django-job-portal (up to commit dfa352f305bba44445ac5dc12e9b2a98c9dcd71f). The vulnerability resides in EditEmployeeProfileAPIView (accounts/api/views.py) of the Employee Dashboard Endpoint, where manipulating the role argument leads to improper access controls. An a...
CVE-2026-15171
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u64nhfe25...
CVE-2026-15164
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u64nhfe25 2026-07-10 18:08:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcqjrhfrv2s...
CVE-2026-15170
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u64nhfe25...
CVE-2026-15166
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u64nhfe25...
CVE-2026-13320
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...
GHSA-382C-VX95-W3P5 Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data
Summary GET /v1/contributors/:login/profile and the gittensorygetcontributorprofile MCP tool skip the contributor-scoped access check that every sibling endpoint enforces. Any authenticated session/API/MCP token holder can read any contributor's profile; for confirmed Gittensor miners that expose...
CVE-2026-9021
creationtimestamp| type| source ---|---|--- 2026-07-09 12:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nbzfdnc2x...