73793 matches found
CVE-2026-9487
creationtimestamp| type| source ---|---|--- 2026-08-03 21:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fguhxbs22 2026-08-06 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfqksogqs23...
CVE-2026-9390
creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fde7bch2o 2026-08-06 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msfsahehei2n...
CVE-2026-18108
creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22 2026-08-03 23:11:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117034101614868174 2026-08-03 23:11:16+00:00| seen|...
CVE-2026-56158
creationtimestamp| type| source ---|---|--- 2026-08-03 21:00:03+00:00| seen| https://t.me/GithubRedTeam/96489 2026-08-04 00:00:09+00:00| published-proof-of-concept| Telegram/C7mZW8YEibhjuVQ7-UjPpcsJfq8AEPUYczTR6mXKULyoi4s 2026-08-04 00:00:12+00:00| published-proof-of-concept|...
CVE-2026-18644
creationtimestamp| type| source ---|---|--- 2026-08-03 20:58:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f7qkfl32q...
CVE-2026-66296
creationtimestamp| type| source ---|---|--- 2026-08-03 20:56:34+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f4zhdu22k...
CVE-2026-67598
creationtimestamp| type| source ---|---|--- 2026-08-03 20:55:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f2blmgt2q 2026-08-03 21:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fgvrgmd2i 2026-08-07 10:04:24+00:00|...
CVE-2026-38713
creationtimestamp| type| source ---|---|--- 2026-08-03 20:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7eym4tcx2o...
CVE-2026-18576
creationtimestamp| type| source ---|---|--- 2026-08-03 20:52:02+00:00| seen| https://bsky.app/profile/newssecia.bsky.social/post/3ms7euvqoup2d 2026-08-05 20:37:17+00:00| seen| https://bsky.app/profile/newssecia.bsky.social/post/3mseeyfddjh2b...
CVE-2026-18616
creationtimestamp| type| source ---|---|--- 2026-08-03 20:42:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7eeoxtlk2l 2026-08-04 16:00:45+00:00| seen|...
GHSA-V8FG-2RW7-Q452 Sequelize: SQL Injection (Oracle DB)
Summary SQL Injection is possible with strings only if dialect is set to oracle. The vulnerability was confirmed on Sequelize v6.37.3. Details The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. javascript else if dialect === 'oracle...
Sequelize: SQL Injection (Oracle DB)
Summary SQL Injection is possible with strings only if dialect is set to oracle. The vulnerability was confirmed on Sequelize v6.37.3. Details The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. javascript else if dialect === 'oracle...
CVE-2026-69240 Sequelize: SQL Injection (Oracle DB)
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. In the Oracle dialect, when val is a string and starts wit...
CVE-2026-69240
Summary: CVE-2026-69240 affects Sequelize (Node.js ORM). Before 6.37.4, the Oracle dialect may be vulnerable to SQL injection when strings reach the escape path in sql-string.js: if a string value starts with TO_TIMESTAMP or TO_DATE, quotes are not escaped, returning the string unmodified. This a...
CVE-2025-40934
creationtimestamp| type| source ---|---|--- 2026-08-03 20:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18568...
CVE-2026-67609
creationtimestamp| type| source ---|---|--- 2026-08-03 19:59:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms7bw6w6qd2v...
CVE-2026-38447
creationtimestamp| type| source ---|---|--- 2026-08-03 19:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7bjq4l2z2l...
GHSA-JJ27-H5HQ-8X99
creationtimestamp| type| source ---|---|--- 2026-08-03 19:31:37+00:00| seen| https://gist.github.com/alon710/bdd530b55ab23396bc2ee2dc380962dc...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...