213 matches found
CVE-2026-44099
creationtimestamp| type| source ---|---|--- 2026-07-30 07:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bapsujimxsazk...
GHSA-3FCR-JVGP-7F58
creationtimestamp| type| source ---|---|--- 2026-07-28 18:31:38+00:00| seen| https://gist.github.com/alon710/49b30b9938ae88ab2f795a5eb6f5b0cc...
CVE-2026-62436
creationtimestamp| type| source ---|---|--- 2026-07-28 14:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpo7czz472g 2026-07-28 15:12:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpp535lxd22 2026-07-29 13:55:22+00:00| seen|...
CVE-2026-60456
...
CVE-2026-46941
Oracle E-Business Suite Cost Management's Cost Maintenance component is affected (CVE-2026-46941) in versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Cost Management, potentially taking full control (CVSS 7.5). The vulnerability details, impact ...
CVE-2026-8593
creationtimestamp| type| source ---|---|--- 2026-07-21 10:14:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5l6vdigl2x...
CVE-2026-9602
creationtimestamp| type| source ---|---|--- 2026-07-17 14:30:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxnfdv6n2i...
CVE-2026-15902
creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:58:35+00:00| seen|...
EUVD-2026-43195
A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. T...
CVE-2026-15473
The CVE-2026-15473 entry concerns Eleveo Call Recording Software 9.7.0. The issue affects the Recorded Calls Page’s file handling at /callrec/restoreCallAction.do, where processing leads to improper authorization. The vulnerability is exploitable remotely, with exploit code described as PROOF-OF-...
CVE-2026-15480
creationtimestamp| type| source ---|---|--- 2026-07-11 15:38:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116902088383530926 2026-07-12 06:52:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqglom7dkg2w 2026-07-12 07:00:32+00:00| seen|...
CVE-2026-12108
creationtimestamp| type| source ---|---|--- 2026-07-10 12:02:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc43ygvab2e 2026-07-10 21:13:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2v5rp452s 2026-07-10 21:13:31+00:00| seen|...
CVE-2026-8924
creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23...
CVE-2026-13997
creationtimestamp| type| source ---|---|--- 2026-07-01 21:20:15+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmh2z4gap2u 2026-07-01 21:20:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh33luvg24 2026-07-02 07:48:45+00:00| seen|...
CVE-2026-13824
creationtimestamp| type| source ---|---|--- 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmcguh3752x 2026-07-01 19:57:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmcgufwpg2i 2026-07-02 01:07:47+00:00| seen|...
CVE-2026-46817
creationtimestamp| type| source ---|---|--- 2026-06-29 13:46:37+00:00| seen| https://bsky.app/profile/bleepingcomputer.com/post/3mpgmrwrd2525 2026-06-29 14:01:32+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpgnmnxscm2c 2026-06-29 14:03:49+00:00| seen|...
PT-2026-52445
Name of the Vulnerable Software and Affected Versions Remote Keyless Entry System RKES using 433 MHz key fob FCC ID CWTR53R0 affected versions not specified Description The system is susceptible to a roll-back attack targeting its rolling-code authentication. An attacker within radio frequency...
CVE-2026-52940
creationtimestamp| type| source ---|---|--- 2026-06-24 08:38:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116804178176541056 2026-06-24 10:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqbszocp2x...
CVE-2026-56345
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target usersid from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload wit...
CVE-2026-56345 AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target usersid from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload wit...