CVE-2026-33398 Authenticated users can read hidden forum posts through `/forum/get_quotes`

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

CVE-2026-33398 Authenticated users can read hidden forum posts through `/forum/get_quotes`

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

PT-2026-45803

NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...

PT-2026-45801

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

NamelessMC 安全漏洞

NamelessMC is a free, easy-to-use, and powerful website software developed by the NamelessMC team. It’s suitable for your Minecraft server and comes with numerous features. Version 2.2.4 of NamelessMC has a security vulnerability that arises from not verifying the authorization of viewers before...

CVE-2026-48188

creationtimestamp| type| source ---|---|--- 2026-06-01 04:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7byrnowf2z 2026-06-01 05:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn7cctz75a2r 2026-06-01 05:04:49+00:00| seen|...

CVE-2026-10179

creationtimestamp| type| source ---|---|--- 2026-05-31 13:23:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5nyomfww2f 2026-05-31 13:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5obdkwxa2m 2026-05-31 17:02:28+00:00| seen|...

CVE-2026-10164

creationtimestamp| type| source ---|---|--- 2026-05-31 04:57:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4rocjfim2q 2026-05-31 05:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ruozarc2r 2026-05-31 06:00:28+00:00| seen|...

CVE-2026-10125

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joxxx5e2m 2026-05-30 17:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3m2li2nr2n...

CVE-2026-10124

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joqscdv2p 2026-05-30 17:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3kxusz622n...

CVE-2026-10119

creationtimestamp| type| source ---|---|--- 2026-05-30 15:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3f3qxydx2k 2026-05-30 16:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3gcwbhio2r 2026-05-30 16:01:10+00:00| seen|...

CVE-2026-47125

creationtimestamp| type| source ---|---|--- 2026-05-29 19:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7v62jq52a 2026-05-29 20:16:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmze567paf2r...

CVE-2026-44698

creationtimestamp| type| source ---|---|--- 2026-05-29 15:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmysjlmepp2v 2026-05-29 16:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmywtjjgs62e...

CVE-2026-45615

creationtimestamp| type| source ---|---|--- 2026-05-29 15:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmysjevepa2m 2026-05-29 16:13:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmywkkihvl2x...

CVE-2026-45707

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyshiifaa2m 2026-05-29 16:23:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyx4hyvj52m...

CVE-2026-8669

creationtimestamp| type| source ---|---|--- 2026-05-29 10:35:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmydnjivqs2r 2026-05-29 10:35:28+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmydngtxy22r...

CVE-2026-40962

creationtimestamp| type| source ---|---|--- 2026-05-29 10:04:33+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmybw5zfqs2r 2026-05-29 10:04:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmybwauay22r...

CVE-2026-8070

creationtimestamp| type| source ---|---|--- 2026-05-29 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116655982227358575 2026-05-29 04:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxpaxlrnq2p 2026-05-29 04:59:24+00:00| seen|...

CVE-2026-2128 Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the wordpressloggedin cookie in the inc/cache/execute-cache.php file when the "Cache Logged-in Users"...

CVE-2026-7480

creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxka2lxrs2e 2026-05-29 03:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116655628380153994 2026-05-29 05:09:25+00:00| seen|...