ECHO-9EAD-DC80-1FF3

Bulletin has no description...

ECHO-7BF3-5AC0-9C12

Bulletin has no description...

CVE-2026-9016

creationtimestamp| type| source ---|---|--- 2026-06-06 08:49:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmbhfnw6f2n 2026-06-14 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3moaqqe3bb626...

MINI-6VJQ-3X44-GJ36

Bulletin has no description...

MINI-2CRW-69WV-HX88

Bulletin has no description...

MINI-9X9M-8F43-WCM4

Bulletin has no description...

CVE-2026-8611 Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter

The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoiceid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-38579

Multiple reflected Cross-Site Scripting XSS vulnerabilities in damasac thaipalliativelte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via the idFormMain parameter line 24, the id parameter lines 25, 75, and the ptidkey parameter lines 26, 42 in...

PT-2026-47163

Name of the Vulnerable Software and Affected Versions onedev versions prior to 15.0.6 Description Improper authorization exists in the Parent Project Handler component within the '/projects/' file. A remote attacker can manipulate the project.parentId argument to bypass authorization controls...

EulerOS Virtualization 2.13.1 : util-linux (EulerOS-SA-2026-2153)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifical...

CVE-2026-7523

The CVE-2026-7523 entry concerns the Alba Board WordPress plugin (

MINI-35X7-X5W5-H4VX

Bulletin has no description...

CVE-2026-46397

creationtimestamp| type| source ---|---|--- 2026-06-05 21:40:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl42opps527...

CVE-2026-46401

creationtimestamp| type| source ---|---|--- 2026-06-05 21:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzzec5z52k...

CVE-2026-25623

creationtimestamp| type| source ---|---|--- 2026-06-05 20:48:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkz6zg3ke27...

CVE-2026-25621

creationtimestamp| type| source ---|---|--- 2026-06-05 20:47:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkz3nk4lf2l...

EUVD-2026-33408

Shopper: Missing authorization on Product admin Livewire sub-form components...

CVE-2025-56352

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 2024-02-18, the broker mishandles protocol violations during CONNECT packet parsing. When receiving a CONNECT packet with a zero-length Client ID while CleanSession is set to 0, the broker correctly replies with a CONNACK return code 0x0...

CVE-2025-65132

alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting XSS in /public/admin/editroom.php which allows an attacker to inject and execute arbitrary JavaScript via the roomid GET parameter...

CVE-2026-25199

Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.0.0. The Proxmox extension for CloudStack improperly uses a user-editable instance setting, proxmoxvmid, to associate...