122013 matches found
CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources
Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...
CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources
Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...
CVE-2026-81676
creationtimestamp| type| source ---|---|--- 2026-08-27 14:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jqohkgsvhvttq...
CVE-2026-81753
creationtimestamp| type| source ---|---|--- 2026-08-27 14:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sc7a3hgymhag...
CVE-2026-81814
creationtimestamp| type| source ---|---|--- 2026-08-27 14:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/absbmm7v5yzuz...
CVE-2026-81662
Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...
CVE-2026-32479
creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2sqlkaaa2m 2026-08-28 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4mzd3fc72e...
CVE-2021-1480
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-28 00:00:53+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-29 00:00:16+00:00| published-proof-of-concept|...
CVE-2017-7092
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-28 00:00:54+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-29 00:00:16+00:00| published-proof-of-concept|...
CVE-2026-62958
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:09+00:00| seen| Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo 2026-08-28 00:00:52+00:00| seen| Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo 2026-08-29 00:00:27+00:00| published-proof-of-concept|...
CVE-2025-69515
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:05+00:00| seen| Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg 2026-08-28 00:00:45+00:00| published-proof-of-concept| Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg...
CVE-2026-73646
A flaw was found in PostCSS. An attacker can exploit a path traversal vulnerability by providing specially crafted sourceMappingURL values in untrusted CSS files. This allows the attacker to disclose sensitive sourcesContent from arbitrary .map files accessible on the system, leading to informati...
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...
CVE-2026-78274
creationtimestamp| type| source ---|---|--- 2026-08-27 10:41:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbjo4nisswpxw 2026-08-27 12:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2sretupz2c 2026-08-28 05:40:06+00:00| seen|...
CVE-2026-81662 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys
Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...
CVE-2026-81277
creationtimestamp| type| source ---|---|--- 2026-08-27 10:15:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ihuhrandjtdwu 2026-08-27 12:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2sgg55ji2m...
ApplicationInspector v1.10.1
Introduction Microsoft Application Inspector is a software source code characterization tool that helps identify coding features of first or third party software components based on well-known library/API calls and is helpful in security and non-security use cases. It uses hundreds of rules and...
CVE-2017-7577
creationtimestamp| type| source ---|---|--- 2026-08-27 09:00:03+00:00| seen| https://t.me/thehaking/2965 2026-08-28 00:01:00+00:00| published-proof-of-concept| https://t.me/thehaking/2965...
CVE-2026-80587
creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq3yuww2y 2026-08-27 09:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2ifescyz2o 2026-08-27 16:23:29+00:00| seen|...