3444 matches found
EUVD-2026-33983
NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...
CVE-2026-40571 NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization
NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...
CVE-2026-35447
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
EUVD-2026-33982
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447
NamelessMC web software (Minecraft servers) is affected by CVE-2026-35447 in version 2.2.4. The flaw resides in the profile page (modules/Core/pages/profile.php), where wall post submissions and replies are processed before verifying the viewer’s authorization. This allows any user with the profi...
CVE-2026-40314
NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...
PT-2026-45801
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-9330
creationtimestamp| type| source ---|---|--- 2026-06-01 16:50:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26 2026-06-01 19:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatq63y672c 2026-06-04 20:35:04+00:00| seen|...
USN-8209-2 lcms2 vulnerability
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use thi...
USN-8209-2: Little CMS vulnerability
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use thi...
CVE-2026-7858
creationtimestamp| type| source ---|---|--- 2026-06-01 12:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna3qiivt22p 2026-06-01 14:05:55+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnaasqd4ld2y...
CVE-2026-10164
creationtimestamp| type| source ---|---|--- 2026-05-31 04:57:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4rocjfim2q 2026-05-31 05:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ruozarc2r 2026-05-31 06:00:28+00:00| seen|...
CVE-2026-8594
creationtimestamp| type| source ---|---|--- 2026-05-30 17:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3ljwyje52a 2026-05-30 17:47:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn3mbfa6u42m...
CVE-2026-10125
creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joxxx5e2m 2026-05-30 17:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3m2li2nr2n...
CVE-2026-7459
creationtimestamp| type| source ---|---|--- 2026-05-30 10:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn2ttkka6g2e 2026-05-30 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116663059987255369 2026-05-30 16:02:08+00:00| seen|...
CVE-2026-10126
creationtimestamp| type| source ---|---|--- 2026-05-30 08:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-10126 2026-05-30 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3sacepx62n 2026-05-30 20:00:42+00:00| seen|...
CVE-2026-45787
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common...