39692 matches found
CVE-2026-40571
NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...
CVE-2026-40571 NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization
NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35716
A stack-based buffer overflow in the motionprivacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1 parameter in a POST request to the /cgi-bin/admin/setpm.cgi, /cgi-bin/admin/setmd.cgi, or...
CVE-2026-33398
NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...
CVE-2026-30650
A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device...
CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization
NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...
CVE-2026-33398
NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...
EUVD-2026-33949
NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...
CVE-2026-39551
creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncq57sabd27 2026-06-03 06:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmrltjg2h...
CVE-2026-9309
creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4gxck323 2026-06-03 04:52:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-6...
CVE-2026-9308
creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4gxck323 2026-06-03 04:52:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-6...
CVE-2026-42669
creationtimestamp| type| source ---|---|--- 2026-06-02 13:40:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncpubck3f2j 2026-06-03 06:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmyy74h2f...
CVE-2025-58705
creationtimestamp| type| source ---|---|--- 2026-06-02 13:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncoillocc2j 2026-06-04 08:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tqcloi2p...
CVE-2026-1451
creationtimestamp| type| source ---|---|--- 2026-06-02 09:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncd5uzkw32d 2026-06-03 16:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnfixlzgle24...
CVE-2026-9730
creationtimestamp| type| source ---|---|--- 2026-06-02 09:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncccz3fz32j 2026-06-03 09:15:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mneriy7rga2c...
CVE-2026-2425
creationtimestamp| type| source ---|---|--- 2026-06-02 09:28:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncbsemgxr24...