24694 matches found
PT-2026-65711
An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...
CVE-2025-67408
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...
PT-2026-65707
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position, and cached lesson state via the SCORM API endpoint...
CVE-2025-67408
CVE-2025-67408 affects Sourcecodester CASAP Automated Enrollment System 1.0. The vulnerability is an SQL Injection in /save_user.php via the parameter status. Documented impact is partial confidentiality, integrity, and availability impact with a CVSS 3.1 base score of 7.3 (HIGH), attack vector N...
CVE-2026-56822
CVE-2026-56822 affects Netty’s OcspServerCertificateValidator. The TOCTOU race forwards SslHandshakeCompletionEvent before OCSP validation finishes, potentially allowing downstream handlers to send data to a revoked server before the OCSP check closes the channel. Affected releases: prior to 4.1....
CVE-2026-56822
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous OCSP validation completes. This allows the client's downstream handlers to se...
EUVD-2026-50090
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
CVE-2026-56821
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
CVE-2026-56821 Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
CVE-2026-56821 Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
CVE-2026-56821
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
CVE-2026-56821 Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP response but does not stop processing it, so an expired GOOD response is still reported as VALID, letting an on-path...
WordPress FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin <= 1.1.24.2 - Cross-Site Request Forgery to Sync Rule Status Toggle vulnerability
Cross-Site Request Forgery to Sync Rule Status Toggle vulnerability discovered by Deadbee in WordPress Plugin FuseWP versions = 1.1.24.2...
CVE-2026-51259
creationtimestamp| type| source ---|---|--- 2026-07-28 19:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4mb5ppf2k...
CVE-2026-48395
creationtimestamp| type| source ---|---|--- 2026-07-28 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq35d7c4r23 2026-07-29 12:04:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrrv3heowi2d 2026-08-05 20:37:06+00:00| seen|...
SUSE CVE-2026-58216
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...
SUSE CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
CVE-2026-61609
creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...