PT-2026-102395

Name of the Vulnerable Software and Affected Versions httpdbg versions prior to 2.2.1 Description The web interface fails to validate URL schemes in recorded HTTP request URLs that are rendered as clickable links. An attacker who can control the recorded traffic can provide URLs using the...

Threat Intelligence Alone Won't Close the Exploitation Gap

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to...

CVE-2026-89250 WWBN AVideo Unauthenticated File Read via getRecordedFile.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...

CVE-2026-89250: Missing Authentication for Critical Function

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...

CVE-2026-19774

creationtimestamp| type| source ---|---|--- 2026-08-24 23:40:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117153126668400005 2026-09-15 20:13:32+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgroc4e426 2026-09-18 20:01:50+00:00| seen|...

CVE-2026-44099

creationtimestamp| type| source ---|---|--- 2026-07-30 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bapsujimxsazk...

GHSA-3FCR-JVGP-7F58

creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc...

CVE-2026-62436

creationtimestamp| type| source ---|---|--- 2026-07-28 14:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpo7czz472g 2026-07-28 15:12:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpp535lxd22 2026-07-29 13:55:22+00:00| seen|...

CVE-2026-60456

...

CVE-2026-46941

Oracle E-Business Suite Cost Management's Cost Maintenance component is affected (CVE-2026-46941) in versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Cost Management, potentially taking full control (CVSS 7.5). The vulnerability details, impact ...

CVE-2026-8593

creationtimestamp| type| source ---|---|--- 2026-07-21 10:14:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5l6vdigl2x...

CVE-2026-9602

creationtimestamp| type| source ---|---|--- 2026-07-17 14:30:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxnfdv6n2i...

CVE-2026-15902

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:58:35+00:00| seen|...

EUVD-2026-43195

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. T...

CVE-2026-15473

The CVE-2026-15473 entry concerns Eleveo Call Recording Software 9.7.0. The issue affects the Recorded Calls Page’s file handling at /callrec/restoreCallAction.do, where processing leads to improper authorization. The vulnerability is exploitable remotely, with exploit code described as PROOF-OF-...

CVE-2026-15473 Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. T...

CVE-2026-15473: Improper Authorization

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. T...

CVE-2026-15480

creationtimestamp| type| source ---|---|--- 2026-07-11 15:38:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116902088383530926 2026-07-12 06:52:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqglom7dkg2w 2026-07-12 07:00:32+00:00| seen|...

CVE-2026-12108

creationtimestamp| type| source ---|---|--- 2026-07-10 12:02:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc43ygvab2e 2026-07-10 21:13:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2v5rp452s 2026-07-10 21:13:31+00:00| seen|...

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23 2026-09-14 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhxwx34cu2r 2026-09-29 12:01:03+00:00| seen|...