CVE-2026-12692

creationtimestamp| type| source ---|---|--- 2026-07-17 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquayoq3ib2v 2026-07-17 18:51:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquga3ec2f2s 2026-07-17 19:31:26+00:00| seen|...

CVE-2026-51080

creationtimestamp| type| source ---|---|--- 2026-07-17 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquav44jac2z 2026-07-17 17:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquclsxilq2x 2026-07-19 11:00:30+00:00| seen|...

EUVD-2026-45202

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

CVE-2026-63101 Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

CVE-2026-63093

creationtimestamp| type| source ---|---|--- 2026-07-17 15:16:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqu272jdvo24 2026-07-17 18:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x 2026-07-19 10:01:08+00:00| seen|...

CVE-2026-12715

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...

EUVD-2026-45187

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 April 2026, and no...

CVE-2026-8075

creationtimestamp| type| source ---|---|--- 2026-07-17 14:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtx6yqf4f2q 2026-09-29 12:47:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

CVE-2024-23567

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...

CVE-2026-22104

creationtimestamp| type| source ---|---|--- 2026-07-17 14:13:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwoapfly2x...

CVE-2024-23567

creationtimestamp| type| source ---|---|--- 2026-07-17 13:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtvtei6qc2e...

CVE-2026-15904

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:32:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942644743608855 2026-07-20 04:45:51+00:00| seen|...

CVE-2026-15903

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:58:55+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942748712137836 2026-07-19 11:01:06+00:00| seen|...

CVE-2026-15900

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:30:27+00:00| seen|...

CVE-2026-9592

SEPPmail Secure Email Gateway & SEPPmail Cloud prior to 15.0.4.2 are vulnerable. The issue arises because the session token is disclosed in the URL and an HTTP header within the GINA web portal, allowing an attacker to replay and hijack a user session. Affected component: GINA web portal session ...

SUSE-SU-2026:3104-1 Security update for python311

This update for python311 fixes the following issues - CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host bsc1261969. - CVE-2026-4786: URLs containing %action can bypass mitigation that allows command injection via the webbrowser.open API bsc1262319. -...

CVE-2026-16016 poco-ai poco-claw task.py run_task server-side request forgery

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...

EUVD-2026-45172

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...

CVE-2026-16016

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...

CVE-2026-16016 poco-ai poco-claw task.py run_task server-side request forgery

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function runtask of the file executor/app/api/v1/task.py. The manipulation of the argument callbackurl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is...