85084 matches found
CVE-2026-56707
creationtimestamp| type| source ---|---|--- 2026-08-25 02:25:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mturc5bqhs2j...
CVE-2026-32563
creationtimestamp| type| source ---|---|--- 2026-08-24 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugf4e7rx2f 2026-08-25 00:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtujmjmv5w2f 2026-08-25 09:00:04+00:00| published-proof-of-concept|...
CVE-2026-78267
creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...
CVE-2026-19843
creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-09-07 15:18:37+00:00| seen|...
CVE-2026-39975
creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...
CVE-2026-78541
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-71509
Dolibarr versions before 24.0.0 contain an improper authorization vulnerability in the expense report REST API update endpoint. Authenticated users holding only expense-creation rights can directly set approval status and approver identity fields via the API, effectively bypassing the approval wo...
EUVD-2026-65082
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...
CVE-2026-76837
creationtimestamp| type| source ---|---|--- 2026-08-24 18:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk...
CVE-2026-76838
creationtimestamp| type| source ---|---|--- 2026-08-24 18:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27 2026-08-24 19:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27...
CVE-2026-71921
creationtimestamp| type| source ---|---|--- 2026-08-24 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttxcd4hst2p 2026-08-24 20:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu47rmww72m 2026-08-25 09:00:04+00:00| published-proof-of-concept|...
EUVD-2026-65062
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...
CVE-2026-78541
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...