CVE-2017-20235

creationtimestamp| type| source ---|---|--- 2026-06-03 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnf345rytp2i...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1491 info: name: Joomla! Component MMS Blo...

PrestaShop Theme Volty CMS Blog - SQL Injection

In the module 'Theme Volty CMS Blog' tvcmsblog up to versions 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-39650 info: name: PrestaShop Theme Volty CMS Blog - SQL Injection author: mastercho severity: critical description: | In the...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

How to Get a Reddit API Key in 2026: Step-by-Step Guide

Getting a Reddit API key starts with creating an application through Reddit’s developer portal and understanding how its…...

CVE-2026-40543

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543...

CVE-2026-7098

creationtimestamp| type| source ---|---|--- 2026-05-30 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn2vv5mgyu2k...

CVE-2026-7054

creationtimestamp| type| source ---|---|--- 2026-05-29 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmyc2x7f2i2g...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

CVE-2026-44315

creationtimestamp| type| source ---|---|--- 2026-05-28 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmwwi7f4w22f...

CVE-2026-47759

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l 2026-05-28 17:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i 2026-05-28 21:37:06+00:00| seen|...

The CISO Whisperer’s Watch List For The Gartner Security & Risk Management Summit 2026

New York, USA, 28th May 2026, CyberNewswire...

CVE-2026-44729

creationtimestamp| type| source ---|---|--- 2026-05-28 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuq35vhat2w...

FBI’s 2025 Internet Crime Report

The 2025 Internet Crime Report was published a few weeks ago, but I only just saw it. Lots of interesting statistics. Press release. News articles...

CVE-2026-7078

creationtimestamp| type| source ---|---|--- 2026-05-27 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmthtpldq22r...

CVE-2026-7079

creationtimestamp| type| source ---|---|--- 2026-05-27 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtb54njo225...

Friday Squid Blogging: Regulating Squid Fishing in the South Pacific

The South Pacific Regional Fisheries Management Organization SPRFMO needs to regulate squid fishing in the South Pacific. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

Malicious Package

Overview polymarket-ai-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

This Is a Hold-Up: Financial Services Under Attack

...

CVE-2026-44295

creationtimestamp| type| source ---|---|--- 2026-05-19 23:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmaiyj6d3p26...