CVE-2026-10219

creationtimestamp| type| source ---|---|--- 2026-06-01 06:52:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7imhnxyv2j...

Security Bulletin:Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP

Summary Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads...

CVE-2026-10200

creationtimestamp| type| source ---|---|--- 2026-06-01 03:33:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn75gzvn722q...

CVE-2026-10208

creationtimestamp| type| source ---|---|--- 2026-06-01 03:24:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn74ylch4u24...

CVE-2026-10198

creationtimestamp| type| source ---|---|--- 2026-06-01 03:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn74icqu6k2j...

CVE-2026-10201

creationtimestamp| type| source ---|---|--- 2026-06-01 03:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn74gixydi26...

CVE-2026-40543

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543 2026-06-01 12:30:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna3hk2oep2p...

CVE-2026-40546

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543 2026-06-01 12:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna4cfm7cs2t...

CVE-2026-40549

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543...

CVE-2026-40547

creationtimestamp| type| source ---|---|--- 2026-06-01 01:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40543...

CVE-2026-44075

creationtimestamp| type| source ---|---|--- 2026-06-01 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmqdab727...

CVE-2026-49387

creationtimestamp| type| source ---|---|--- 2026-06-01 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmqdab727...

CVE-2026-44071

creationtimestamp| type| source ---|---|--- 2026-06-01 00:01:28+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmpbzkd2n...

DeepAI 安全漏洞

DeepAI is a generative artificial intelligence platform developed by DeepAI Inc. in the United States. There is a security vulnerability in DeepAI. This vulnerability stems from the endpoint https://api.deepai.org/changeuseremail, which accepts POST requests without CSRF protection. This could...

PT-2026-45622

Name of the Vulnerable Software and Affected Versions No-Cms version 1.0 Description An SQL injection allows authenticated attackers to manipulate database queries and extract sensitive information. This occurs when submitting POST requests to the '/nocms/main/manage privilege/index/export'...

Quantum Secure Blind Decryption with Two Users

We propose two types of protocols for quantum secure blind decryption, involving two users and servers. User 1 holds the encrypted ciphertext. The servers store several indexed keys including the key encrypting the ciphertext. User 2 aims to obtain the decrypted text. The protocols are designed t...

Patcher: Post-Hoc Patching of Backdoored Large Language Models

Large language models remain vulnerable to jailbreak backdoor attacks, where adversaries poison safety alignment data to embed hidden triggers that bypass safety mechanisms. Existing defenses often require comprehensive attack information or multiple triggered examples, making them impractical wh...

PT-2026-45447

A flaw has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The affected element is an unknown function of the file admin/ of the component Admin Endpoint. This manipulation of the argument uid causes execution after redirect. It is possible to initiate...

PUB-A-438759342

In PostWipeData of recoveryui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-45617

Name of the Vulnerable Software and Affected Versions Pixa Bank version 2.0 Description An SQL injection allows unauthenticated attackers to extract sensitive data from the database, including names, email addresses, and phone numbers. This is achieved by sending POST requests to the...