23316 matches found
CVE-2026-45345
creationtimestamp| type| source ---|---|--- 2026-05-09 22:10:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp 2026-05-16 01:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwocnrknq2e...
CVE-2026-42576
creationtimestamp| type| source ---|---|--- 2026-05-09 21:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7qghol32h...
CVE-2026-8193
creationtimestamp| type| source ---|---|--- 2026-05-09 21:23:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6j67kg32e...
CVE-2026-42562
Plainpad (self-hosted note-taking app) is affected prior to version 1.1.1. A low-privilege, authenticated user can escalate to administrator by submitting admin=true in PUT /api.php/v1/users/{id}; the endpoint stores the admin attribute from user input, allowing immediate access to admin-only rou...
CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)
Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...
CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)
Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...
CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)
Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...
CVE-2026-8188
creationtimestamp| type| source ---|---|--- 2026-05-09 18:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgvgaq6mk2n...
CVE-2026-8189
creationtimestamp| type| source ---|---|--- 2026-05-09 18:35:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgv5ccmxt2r...
CVE-2026-8215
creationtimestamp| type| source ---|---|--- 2026-05-09 16:16:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-8215 2026-05-10 04:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwehud7a2c...
Liberapay: another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
Hello again i discovered that there is another Liberapay profile of Liberapay team member at liberapay.com/mdvhimself contains a link to an expired Twitter account, creating a Broken Link Hijacking BLH vulnerability. An attacker could register the expired handle and control what appears to be an...
OESA-2026-2226 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
OESA-2026-2227 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
CVE-2026-44738
creationtimestamp| type| source ---|---|--- 2026-05-09 10:54:58+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-j274-39qw-32c9 2026-05-11 17:27:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsbarcwj2g 2026-05-11...
CVE-2026-42309
creationtimestamp| type| source ---|---|--- 2026-05-09 08:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftrjndiz2i...
CVE-2026-42310
creationtimestamp| type| source ---|---|--- 2026-05-09 08:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftlkkmrt2t...
CVE-2026-45315
creationtimestamp| type| source ---|---|--- 2026-05-09 08:02:50+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m8f9-9whg-f4xr 2026-05-16 04:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlwxioao4w2c...
CVE-2026-8209
creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...