27160 matches found
GHSA-VCHX-5PR6-FFX2
creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:55+00:00| seen| Telegram/Gog278dWyh4lEZUplneDunVggYKWxHPgBiv3mkrQtX1ZGY...
GHSA-QFC3-HM4J-7Q77
creationtimestamp| type| source ---|---|--- 2026-03-27 21:22:34+00:00| seen| Telegram/HCzuKY5MuLPsfoEI5S3ks6iQFEX7xEFL0kHnLhrHZ36Sb0...
CVE-2026-33879 FLIP doesn't have rate limiting or brute-force protection on login
Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...
CVE-2026-33879 FLIP doesn't have rate limiting or brute-force protection on login
Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...
CVE-2026-33879
Federated Learning and Interoperability Platform FLIP is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and...
Exposure of Data Element to Wrong Session
Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...
Exposure of Data Element to Wrong Session
Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the MDM command processing while handling SyncML status code. An attacker can obtain sensitive configuration data belonging to other devices such as WiFi credentials, VPN secrets, and...
CVE-2026-5027
creationtimestamp| type| source ---|---|--- 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116302518672297608 2026-03-27 23:00:43+00:00| seen|...
CVE-2026-5026
creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:52+00:00| published-proof-of-concept| Telegram/pyEIr0Ko2hoCavwas1rlZ1K5Q5ZdrBNaOpK3idLXyAytNFs 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen...
CVE-2026-25334
creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:05+00:00| seen| Telegram/0TkjLsQfxXDhGLxRci6Ro2HiEhTKYRR1p268AcWiw3KWvWE 2026-04-07 04:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miuwyhv7db2w...
CVE-2026-5046
creationtimestamp| type| source ---|---|--- 2026-03-27 16:52:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302173508994263 2026-03-28 09:58:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306207828256273 2026-03-29 17:15:27+00:00| published-proof-of-concept|...
CVE-2026-5036
creationtimestamp| type| source ---|---|--- 2026-03-27 16:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302066909306765 2026-03-28 16:16:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116307694173463292 2026-03-29 09:00:30+00:00| seen|...
CVE-2026-1496
creationtimestamp| type| source ---|---|--- 2026-03-27 15:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2i7xzklv2s 2026-03-27 17:22:21+00:00| seen| Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME...
CVE-2026-5024
creationtimestamp| type| source ---|---|--- 2026-03-27 15:04:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116301748482237182 2026-03-28 12:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306738692445946 2026-03-29 03:55:28+00:00| seen|...
CVE-2026-5021
creationtimestamp| type| source ---|---|--- 2026-03-27 14:36:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116301640210905220 2026-03-29 02:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi64wy5frl2g 2026-03-29 03:00:28+00:00| seen|...
CVE-2026-28377
A flaw was found in Grafana Tempo. This vulnerability exposes the S3 Server-Side Encryption with Customer-Provided Keys SSE-C encryption key in plaintext through the /status/config endpoint. A remote attacker could exploit this to obtain the key, potentially allowing unauthorized access and...
BIT-DISCOURSE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter
Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing postid as an...
BIT-NGINX-GATEWAY-2026-28755 NGINX ngx_stream_ssl_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxstreamsslmodule module due to the improper handling of revoked certificates when configured with the sslverifyclient on and sslocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the...
BIT-NGINX-2026-28755 NGINX ngx_stream_ssl_module vulnerability
NGINX Plus and NGINX Open Source have a vulnerability in the ngxstreamsslmodule module due to the improper handling of revoked certificates when configured with the sslverifyclient on and sslocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the...