26918 matches found
CVE-2026-16806
creationtimestamp| type| source ---|---|--- 2026-07-23 22:28:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971648043364212 2026-07-24 11:00:58+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116974607274777234 2026-07-24 12:45:41+00:00| seen|...
CVE-2026-16805
creationtimestamp| type| source ---|---|--- 2026-07-23 22:15:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971596854729313 2026-07-24 12:45:43+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen|...
CVE-2026-49035 Stack-based Buffer Overflow in MZ Automation libIEC61850
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...
WordPress Payment Plugins for Stripe WooCommerce plugin <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary Order Status Modification vulnerability discovered by gidget smith in WordPress Plugin Stripe For WooCommerce versions = 4.0.7...
CVE-2026-62493
creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61162
creationtimestamp| type| source ---|---|--- 2026-07-23 18:16:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60778
creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-60175
creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65916
CyberPanel up to version 1.9.1 contains a missing authorization vulnerability in the cancelBackupCreation handler. An authenticated user can send crafted POST requests with arbitrary backupCancellationDomain and fileName parameters to terminate backup processes, delete backup archives, corrupt ba...
MINI-2CVG-2PFM-G4CR
Bulletin has no description...
CVE-2026-59544
creationtimestamp| type| source ---|---|--- 2026-07-23 13:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvlzdlq22s...
CVE-2026-59543
creationtimestamp| type| source ---|---|--- 2026-07-23 13:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvii4pva2q...
PYSEC-2026-3475 LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection
Summary When LightRAG is deployed with LIGHTRAGAPIKEY set but AUTHACCOUNTS unset an officially documented "API-Key authentication" mode, the X-API-Key protection can be bypassed by any remote unauthenticated attacker. The bypass does not require network contact with the victim server — an attacke...
CVE-2026-15448
Tickera – Sell Tickets & Manage Events (WordPress) is vulnerable to a generic SQL Injection via the tc_order_status_filter parameter in all versions up to 3.6.0.1, caused by insufficient escaping of user input and inadequate preparation of the existing SQL query. Authenticated attackers with staf...
CVE-2026-15448 Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tcorderstatusfilter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi...
CVE-2026-9577
The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...
CVE-2026-9577 Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter
The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...
CVE-2026-9577
The Post Status Notifier Lite WordPress plugin (versions before 1.13.0 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The flaw exists because the plugin fails to properly escape the mod URL parameter before reflecting it onto the admin settings page at admin.php?page=post-status...