73672 matches found
EUVD-2026-52402
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...
PT-2026-67508
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TO TIMESTAMP or TO DATE. In the Oracle dialect, when val is a string and starts...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...
CVE-2026-38447
Summary: CVE-2026-38447 affects osTicket 1.18.3, where API keys are generated with a predictable construction based on MD5 hashing and inputs such as the current timestamp and client IP. The underlying issue is low-entropy key generation due to MD5 and predictable inputs. Impact: The vulnerabilit...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...
CVE-2026-56672
creationtimestamp| type| source ---|---|--- 2026-08-02 19:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4o675pfx2b...
CVE-2026-12720
creationtimestamp| type| source ---|---|--- 2026-08-02 17:03:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4hir4mdm2t 2026-08-05 01:00:03+00:00| seen| Telegram/rJSqz12D-kpQyCOJVodGQ5YtXruuuT1BANzgPusZ6YAnQ 2026-08-06 00:01:00+00:00| published-proof-of-concept|...
CVE-2026-67356
creationtimestamp| type| source ---|---|--- 2026-08-02 16:12:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4es7oylx2x...
CVE-2026-18284
creationtimestamp| type| source ---|---|--- 2026-08-02 15:58:00+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117026735943720907...
CVE-2026-67357
creationtimestamp| type| source ---|---|--- 2026-08-02 15:34:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4coplchp25 2026-08-02 15:34:50+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4coppunl23...
CVE-2026-65321
creationtimestamp| type| source ---|---|--- 2026-08-02 15:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms4cjulwnx2z 2026-08-02 16:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3j3v5ifejd7bh 2026-08-02 16:09:38+00:00| seen|...
CVE-2026-18280
creationtimestamp| type| source ---|---|--- 2026-08-02 15:30:52+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117026629340357922...
CVE-2026-18282
creationtimestamp| type| source ---|---|--- 2026-08-02 15:20:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117026576569644828...
CVE-2026-12721
creationtimestamp| type| source ---|---|--- 2026-08-02 15:03:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4askknzk2x...
CVE-2026-67309
creationtimestamp| type| source ---|---|--- 2026-08-02 14:46:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms47yxells24 2026-08-06 18:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rxv-jg7p-wvg3 2026-08-06 19:32:23+00:00| seen|...
CVE-2025-71399
creationtimestamp| type| source ---|---|--- 2026-08-02 13:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/25yfg6yzjd6mv 2026-08-02 15:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4aqy7bkd2b 2026-08-02 15:29:22+00:00| seen|...
CVE-2026-9811
creationtimestamp| type| source ---|---|--- 2026-08-02 13:00:02+00:00| seen| https://t.me/GithubRedTeam/96284 2026-08-02 18:00:05+00:00| published-proof-of-concept| Telegram/SHCtA7dY1mItB2gbm66yqWXF69tJGblulI8ccELNE-1shwc 2026-08-02 18:00:05+00:00| published-proof-of-concept|...