CVE-2026-53521: Incorrect Authorization

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/id accepts and persists nonexistent ddnsprofiles IDs for a member-owned server. If another user later creates a DDNS profile with one of those...

Fedora 45 : kubernetes1.33 (2026-05251d4863)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-05251d4863 advisory. Automatic update for kubernetes1.33-1.33.13-1.fc45. Changelog Fri Jun 12 2026 Bradley G Smith - 1.33.13-1 - Update to release 1.33.13 - Resolves: rhbz2467604...

Linux Distros Unpatched Vulnerability : CVE-2026-9742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When OIDC authentication is enabled in configuration, clients may set specific values in the mechanism parameter of the authenticate command that lead to server...

MINI-GQP7-6V76-4XM9

Bulletin has no description...

MINI-8C8P-5458-6JV6

Bulletin has no description...

CVE-2026-53817

creationtimestamp| type| source ---|---|--- 2026-06-11 22:32:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2brtocbo2g 2026-06-14 16:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mob5bd4nws2d...

CVE-2026-34693

creationtimestamp| type| source ---|---|--- 2026-06-11 22:23:20+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mo2bberyxr2g 2026-06-12 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2zizgsmd2y...

CVE-2026-53813

creationtimestamp| type| source ---|---|--- 2026-06-11 22:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2a5n7kl72o 2026-06-14 15:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moazw5uzcb2a...

CVE-2026-31789 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-47189

CVE-2026-47189 — Quest Bot AutoMod removal : The issue affects Quest Bot (Discord bot) prior to version 1.0.5, where the AutoMod remove flow looks up and deletes rules by a global database ID without verifying that the rule belongs to the guild where the command runs. An attacker can learn a vict...

CVE-2026-47189 Quest Bot: AutoMod removal can delete rules from another guild by global rule ID

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without verifying that the rule belongs to the guild where the command is executed. A user can learn a victim...

CVE-2026-50629

creationtimestamp| type| source ---|---|--- 2026-06-11 17:41:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrjdlhjm25...

MINI-6334-6FM6-P3CV

Bulletin has no description...

CVE-2026-3341

CVE-2026-3341 affects IBM Langflow Desktop 1.0.0–1.9.2. The root cause is a TOCTOU DNS rebinding flaw in SSRF protection: validate_url_for_ssrf() uses socket.getaddrinfo(), while httpx.AsyncClient() conducts a separate DNS lookup during connection, allowing an attacker-controlled DNS domain with ...

CVE-2026-38581

SQL Injection vulnerability in damasac thaipalliativelte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php line 14 and the id parameter line 49. The parameters are concatenated directly into SQL queries without...

CVE-2026-4764

creationtimestamp| type| source ---|---|--- 2026-06-11 13:47:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzehbuzqe2m...

CVE-2026-8406 openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mailid value...

CVE-2026-8406 openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mailid value...

EUVD-2026-36245

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mailid value...

CVE-2026-8406 openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail

openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mailid value...