CVE-2026-37978

creationtimestamp| type| source ---|---|--- 2026-05-19 13:27:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7imsf7vh2h...

CVE-2026-7507

creationtimestamp| type| source ---|---|--- 2026-05-19 13:22:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7idtxwhm2v...

CVE-2026-8727

creationtimestamp| type| source ---|---|--- 2026-05-19 13:12:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7hrx4r752q...

CVE-2026-42097

Sparx products show multiple CVEs with concrete details across Pro Cloud Server and Enterprise Architect. CVE-2026-42097 describes an authentication bypass: a request can omit the model parameter and embed the model name in a POST blob, enabling SQL query execution without authentication. CVE-202...

EUVD-2026-30931

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

CVE-2026-37982

creationtimestamp| type| source ---|---|--- 2026-05-19 12:46:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gdbiiqv2t...

CVE-2026-8726

creationtimestamp| type| source ---|---|--- 2026-05-19 12:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7fzqvuki2r 2026-06-01 11:03:17+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wm5btub2k...

CVE-2026-4630

creationtimestamp| type| source ---|---|--- 2026-05-19 12:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7fwwaie62h...

CVE-2026-43492

creationtimestamp| type| source ---|---|--- 2026-05-19 12:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7fua4css2n 2026-07-06 05:55:36+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-42649

creationtimestamp| type| source ---|---|--- 2026-05-19 09:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm73h6o3dx2i...

CVE-2026-8813

creationtimestamp| type| source ---|---|--- 2026-05-19 09:26:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm73576ws62q 2026-05-31 11:01:45+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g2iuqbj2z...

CVE-2026-8830

creationtimestamp| type| source ---|---|--- 2026-05-19 09:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm72uar7nj2v...

CVE-2026-47309

creationtimestamp| type| source ---|---|--- 2026-05-19 09:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm72lcczzl2o...

EternalBlue

EternalBlue MS17-010 Exploitation Lab A professional, end-t...

BIT-MONGODB-2026-8336 Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands

After invoking $internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine through $where, $function, mapreduce reduce stage, etc. is used also in...

BIT-MONGODB-2026-8202 Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts MongoDB Server v7.0 versions prior to...

CVE-2026-42099

creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...

CVE-2026-42098

creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...

CVE-2026-42100

creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...

CVE-2026-8776

A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow. It is possible to launch the attack...