24307 matches found
CVE-2026-58486
creationtimestamp| type| source ---|---|--- 2026-07-14 02:38:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6gu5bqd2z...
GHSA-Q4Q6-R8WH-5CGH
creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:06+00:00| seen| https://t.me/bdufstecru/3243 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3243...
GHSA-4J6X-2764-M8GH
creationtimestamp| type| source ---|---|--- 2026-07-14 01:00:04+00:00| seen| https://t.me/bdufstecru/3289 2026-07-15 00:00:35+00:00| published-proof-of-concept| https://t.me/bdufstecru/3289...
PT-2026-58676
Name of the Vulnerable Software and Affected Versions Devolutions Server version 2026.2.11 Devolutions Server version 2026.1.22 Description Improper authorization in the access request status endpoint allows an authenticated low-privileged user to approve their own pending access request. This is...
GHSA-8F6J-263M-G72X Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Summary SignedDataVerifier attempts to perform online revocation checking when enableonlinechecks=True, but its OCSP validation logic accepts stale GOOD responses as valid indefinitely. In appstoreserverlibrary/signeddataverifier.py, ChainVerifier.checkocspstatus verifies the OCSP response...
CVE-2026-62195
creationtimestamp| type| source ---|---|--- 2026-07-13 23:15:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkt4djxzu2i 2026-07-15 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqoemwbh6j2f...
GHSA-CM8G-8JFQ-887P
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92588 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92588 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92588 2026-07-16 19:00:16+00:00| seen|...
CVE-2026-57803
creationtimestamp| type| source ---|---|--- 2026-07-13 19:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkgiadrvj2e 2026-07-14 02:26:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql5seep2a22 2026-07-16 08:08:03+00:00| seen|...
CVE-2026-35210
creationtimestamp| type| source ---|---|--- 2026-07-13 18:30:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkd5omnae2f 2026-07-16 08:05:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrnubw7r2i...
GHSA-MXPF-QGG6-V3FF NukeViet: Unauthenticated Reflected XSS in Comment Module
Summary Reflected XSS in the Comment module via the statuscomment URL parameter. The parameter accepts attacker-controlled base64-encoded HTML/JavaScript that is decoded server-side and rendered unescaped into the page. Compounded by a second flaw: the checkss anti-forgery token was derived from ...
GHSA-RWCV-WHM8-FMXM
creationtimestamp| type| source ---|---|--- 2026-07-13 17:11:49+00:00| seen| https://gist.github.com/alon710/1cf437e22a892172012205a9b0e24d57...
CVE-2026-22093
creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkhgrukm2t 2026-07-13 17:49:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkavfwvjs2y 2026-07-14 03:05:48+00:00| seen|...
CERTFR-2026-CTI-004
creationtimestamp| type| source ---|---|--- 2026-07-13 09:25:58+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116911948082559856...
MINI-QHQ7-77WW-6CFC
Bulletin has no description...
CVE-2026-4769
creationtimestamp| type| source ---|---|--- 2026-07-13 07:21:18+00:00| seen| https://infosec.exchange/users/certvde/statuses/116911458109125585 2026-07-13 07:54:49+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l 2026-07-13 08:30:05+00:00| seen|...
MINI-65GC-X3VQ-FWH6
Bulletin has no description...
MINI-92PV-4QV5-XMJ9
Bulletin has no description...
MINI-V3FV-VRJG-9J63
Bulletin has no description...