CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

CVE-2026-19345 code-projects Task Management System UpdateTaskStatus.php authorization

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-71991

creationtimestamp| type| source ---|---|--- 2026-08-09 01:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msmf3yogwh2y...

CVE-2026-19341

creationtimestamp| type| source ---|---|--- 2026-08-08 17:03:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117060966342443793...

CVE-2026-20346

creationtimestamp| type| source ---|---|--- 2026-08-08 15:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117060495821023885 2026-08-10 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...

CVE-2026-68082

creationtimestamp| type| source ---|---|--- 2026-08-08 14:36:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117060389626457586...

MINI-R82J-P739-HGQ4

Bulletin has no description...

CVE-2026-19195

creationtimestamp| type| source ---|---|--- 2026-08-08 12:06:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059799868254552 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97246 2026-08-09 14:02:14+00:00| published-proof-of-concept|...

GHSA-WPQR-6V78-JR5G

creationtimestamp| type| source ---|---|--- 2026-08-08 11:48:00+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585...

CVE-2026-66060

creationtimestamp| type| source ---|---|--- 2026-08-08 11:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059546548263152...

GHSA-7C4V-FWGW-9RF7

creationtimestamp| type| source ---|---|--- 2026-08-08 09:31:21+00:00| seen| https://gist.github.com/alon710/9318966a289b67d09be3b424c52f31ab...

GHSA-29G2-3RMR-QM68

creationtimestamp| type| source ---|---|--- 2026-08-08 08:31:57+00:00| seen| https://gist.github.com/alon710/47ff7eb96677e04e1cb388be69ae9049...

CVE-2026-16578

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

CVE-2026-63220

creationtimestamp| type| source ---|---|--- 2026-08-08 06:36:21+00:00| seen| https://gist.github.com/alon710/8161c68753a945887582acb72752fba7...

EUVD-2026-54737

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

CVE-2026-16578 Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

CVE-2026-16578

The CVE concerns the Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin (before 1.4.0). A REST API endpoint does not perform a capability check, enabling unauthenticated users to retrieve the full list of registered users, including usernames, email a...

CVE-2026-47127

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the...

CVE-2026-47127 Ghostfolio has a Stripe subscription bypass

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the...