264170 matches found
CVE-2026-36537
ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within the user parameter of the /login/oauth2/code/ endpoint. By manipulating the email address in this JSON object, a remote...
PT-2026-49450
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
PT-2026-49497
Unauthenticated Cross Site Request Forgery CSRF in WP Migrate Lite = 2.7.8 versions...
GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerability
Summary A guessable session cookie vulnerability exists in the Web Interface functionality of LPC2011/LPC2211 versions: 1.10. A specially crafted series of HTTP requests can lead to an authentication bypas. An attacker can bruteforce session cookies to trigger this vulnerability. Confirmed...
CVE-2026-53476
creationtimestamp| type| source ---|---|--- 2026-06-14 23:15:59+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvmc2r5y2m 2026-06-16 16:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mog6lcoy6e26...
CVE-2026-53833
creationtimestamp| type| source ---|---|--- 2026-06-14 23:13:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mobvgzxrco25...
CVE-2026-12200
creationtimestamp| type| source ---|---|--- 2026-06-14 16:16:24+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12200 2026-06-15 04:18:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocgjd6dmu2b...
CVE-2026-8385
creationtimestamp| type| source ---|---|--- 2026-06-14 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mob65io5xk2i 2026-06-15 12:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modapctgs22b 2026-07-23 06:00:06+00:00| confirmed|...
CVE-2026-11526
creationtimestamp| type| source ---|---|--- 2026-06-14 13:57:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moawfw6jgb2q 2026-06-14 21:59:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mobrdrtorx2d 2026-06-15 11:39:39+00:00| seen|...
CVE-2026-11526
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...
CVE-2026-49105
creationtimestamp| type| source ---|---|--- 2026-06-14 11:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moanf36hkh2c 2026-06-15 21:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7loee362e 2026-06-17 08:00:33+00:00| seen|...
CVE-2026-47137
creationtimestamp| type| source ---|---|--- 2026-06-14 08:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moachcwmfn2c 2026-07-09 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75n7h44f2r...
Exploit for CVE-2026-5513
CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie...
CVE-2011-0447
creationtimestamp| type| source ---|---|--- 2026-06-14 04:23:47+00:00| seen| https://gist.github.com/riskiidice/ac2f41e06c7793e21f01794f469e3797...
CVE-2026-50011
creationtimestamp| type| source ---|---|--- 2026-06-14 04:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7v26kzmj2v 2026-06-15 23:11:08+00:00| seen| https://gist.github.com/alon710/6e083e538662dc872931a903f1bab93e 2026-07-10 15:58:59+00:00| seen|...
CVE-2026-54421
In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
CVE-2026-48155 vulnerabilities
Vulnerabilities for packages: litellm, open-webui...
PT-2026-49137
Name of the Vulnerable Software and Affected Versions Yealink SIP-T46U version 108.86.0.118 Description A stack-based buffer overflow occurs in the Firmware Chunk Upload Handler component within the sprintf function of the file /api/upgrade/upgrade. This issue is triggered by manipulating the...