40295 matches found
CVE-2026-41002
creationtimestamp| type| source ---|---|--- 2026-05-07 05:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaimg64462k 2026-05-07 06:48:23+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431 2026-05-07 07:29:50+00:00| seen|...
CLSA-2026-1778130778 tomcat: Fix of 2 CVEs
CVE-2025-48988: limit number and header size of multipart parts - CVE-2025-52520: use Math.addExact and long postSize to prevent overflow bypass of maxPostSize during multipart upload...
CVE-2026-41143
YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data'idfiche' value sourced from $POST'idfiche' is concatenated directly into a raw SQL query without any...
EUVD-2026-28312
YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data'idfiche' value sourced from $POST'idfiche' is concatenated directly into a raw SQL query without any...
CVE-2026-41669
creationtimestamp| type| source ---|---|--- 2026-05-07 04:58:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlagko3g752n 2026-05-07 07:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlap55q4jn2i...
CVE-2016-7883
creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:09+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep7byzq2p...
CVE-2016-0955
creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:07+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep5nr3325...
CVE-2026-41890
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before version 0.31.8.0, the deleteProcess action accepts a POST parameter tables containing arbitrary table names. These are pass...
CVE-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...
CVE-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...
CVE-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...
EUVD-2026-28292
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before version 0.31.8.0, the deleteProcess action accepts a POST parameter tables containing arbitrary table names. These are pass...
CVE-2019-1905
creationtimestamp| type| source ---|---|--- 2026-05-07 02:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla5prthjg2v...
CVE-2026-44329
creationtimestamp| type| source ---|---|--- 2026-05-07 01:14:40+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-3258-qmv8-frp3 2026-05-28 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmwmgdr5s42v...
[SECURITY] Fedora 43 Update: dovecot-2.4.3-2.fc43
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the SNS HTTP/HTTPS notification endpoints due to missing signature verification. An attacker can cause the application to process arbitrary payloads as legitimate notifications, auto-confi...
CVE-2026-40076
creationtimestamp| type| source ---|---|--- 2026-05-07 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116530350683018033 2026-05-07 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml7vwe264u2v 2026-05-07 01:43:26+00:00| seen|...
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security
Our computing ecosystem is being transformed by two emerging paradigms: the increased deployment of agentic AI systems and advancements in quantum computing. With respect to agentic AI systems, one of the most critical problems is creating secure governing architectures that ensure agents follow...
PT-2026-38586
Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.2 Description An unauthenticated reflected cross-site scripting issue exists in the visual editor preview renderer. Attackers can execute arbitrary JavaScript by manipulating the r query parameter and component aj...