CVE-2026-49128

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4mj22h2e 2026-05-28 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwykn46cb2k...

CVE-2026-44465

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5all6z2l 2026-05-28 19:40:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrnb4ih62c 2026-06-02 21:37:06+00:00| seen|...

CVE-2026-41565

creationtimestamp| type| source ---|---|--- 2026-05-28 17:08:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwj5n24dt2i 2026-05-28 21:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwy7jdkba24 2026-06-07 15:42:03+00:00| seen|...

CVE-2026-49238

creationtimestamp| type| source ---|---|--- 2026-05-28 15:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwby5t6o32c 2026-05-28 15:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmweoupup52n 2026-06-01 15:07:07+00:00| seen|...

CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

CVE-2026-46425

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n 2026-05-27 19:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i...

CVE-2026-42280

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-42758

creationtimestamp| type| source ---|---|--- 2026-05-27 12:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthiihcsk2w 2026-05-27 12:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtjcflqm22c...

CVE-2026-42747

creationtimestamp| type| source ---|---|--- 2026-05-27 11:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtfogikks2c 2026-05-27 12:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkkzhyw2t...

CVE-2026-40817

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40817

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40817 Unauthenticated SQLi in getAlarmProfiles function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-8450

creationtimestamp| type| source ---|---|--- 2026-05-27 05:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222 2026-05-27 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116645011565190190 2026-05-27 06:00:29+00:00| seen|...

CVE-2026-2253

creationtimestamp| type| source ---|---|--- 2026-05-27 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmspyb5e7w2e 2026-05-27 05:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqr6mndi2i 2026-05-27 07:01:06+00:00| seen|...

CVE-2026-9312

creationtimestamp| type| source ---|---|--- 2026-05-27 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116643949752477544 2026-05-27 01:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsebabvvk26 2026-05-27 01:38:18+00:00| seen|...

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alarms. MB Connect Line mymbCONNECT24 is an internal...

PT-2026-43557

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-45574

creationtimestamp| type| source ---|---|--- 2026-05-26 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xqtamf2e 2026-05-27 01:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdxxcrxo2r...

Hacker Selling 340 Million OnlyFans User Records Built From Old Breaches

A hacker is selling a 340M OnlyFans user database allegedly built by matching old breach data and public profiles to real OnlyFans accounts...

EUVD-2018-21875

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...