26221 matches found
CVE-2026-53499
creationtimestamp| type| source ---|---|--- 2026-08-29 22:44:50+00:00| seen| https://bsky.app/profile/altdigitallatam.org/post/3muaxckwmzs2h...
CVE-2026-82549
creationtimestamp| type| source ---|---|--- 2026-08-29 22:21:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117181125768711993 2026-08-30 17:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucuj22bwn27 2026-08-30 17:04:47+00:00| seen|...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
MINI-CX82-WV7M-C53J
Bulletin has no description...
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
EUVD-2026-68129
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade...
CVE-2026-80668
creationtimestamp| type| source ---|---|--- 2026-08-29 14:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua4rolf6w2b...
CVE-2026-82269
creationtimestamp| type| source ---|---|--- 2026-08-29 14:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22cbhk422...
CVE-2026-18965
creationtimestamp| type| source ---|---|--- 2026-08-29 13:13:04+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mu7xe5uqzr2g...
CVE-2026-70341
creationtimestamp| type| source ---|---|--- 2026-08-29 08:02:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117177749475062529 2026-09-09 13:50:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv3okigklj2c...
CVE-2026-66798
creationtimestamp| type| source ---|---|--- 2026-08-29 07:08:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117177538250243544 2026-08-31 04:45:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...
CVE-2026-17000
creationtimestamp| type| source ---|---|--- 2026-08-29 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7ba4jz4g2b...
CVE-2026-77704
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's status, allowing customers to set arbitrary statuses on appointments they are booked on, including approving their ow...
CVE-2026-77704 Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's status, allowing customers to set arbitrary statuses on appointments they are booked on, including approving their ow...
EUVD-2026-68058
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's status, allowing customers to set arbitrary statuses on appointments they are booked on, including approving their ow...