23073 matches found
CVE-2026-12098
creationtimestamp| type| source ---|---|--- 2026-06-18 08:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokeivjn7e2z...
CVE-2026-9815
creationtimestamp| type| source ---|---|--- 2026-06-18 07:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokdob7lp52d...
CVE-2026-37829
creationtimestamp| type| source ---|---|--- 2026-06-18 05:34:14+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mok45gibfl2q 2026-06-18 14:03:52+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mokympupar26...
CVE-2026-40783
creationtimestamp| type| source ---|---|--- 2026-06-18 05:07:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mok2knrcv52i...
CVE-2026-40455
creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwmyt6s62t...
CVE-2026-48768
creationtimestamp| type| source ---|---|--- 2026-06-18 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojjj35nrc2t 2026-06-18 01:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojpsuhhbw2z 2026-06-19 14:10:24+00:00| seen|...
PT-2026-50705
Name of the Vulnerable Software and Affected Versions U.S. GAO Electronic Protest Docketing System EPDS affected versions not specified U.S. CBCA Electronic Docketing System EDS affected versions not specified Description The U.S. Government Accountability Office GAO Electronic Protest Docketing...
CVE-2026-49133
creationtimestamp| type| source ---|---|--- 2026-06-17 23:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojhot6zj72f...
CVE-2026-54388
creationtimestamp| type| source ---|---|--- 2026-06-17 23:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojgffzrlv2c 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...
CVE-2026-55202
creationtimestamp| type| source ---|---|--- 2026-06-17 23:01:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojg7gts3g27 2026-08-02 15:23:25+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4c2epkfr2c...
CVE-2026-48979
creationtimestamp| type| source ---|---|--- 2026-06-17 22:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfmgmp232z 2026-06-19 12:01:26+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moncap53le2e...
CVE-2026-48822
creationtimestamp| type| source ---|---|--- 2026-06-17 22:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfilb4ch2x...
CVE-2026-48821
creationtimestamp| type| source ---|---|--- 2026-06-17 22:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojfbmjhcl22...
CVE-2026-53805
creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...
CVE-2026-53869
creationtimestamp| type| source ---|---|--- 2026-06-17 21:52:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcebozjs2z...
CVE-2025-36220
creationtimestamp| type| source ---|---|--- 2026-06-17 21:15:25+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojabhsgt52t 2026-08-15 02:34:07+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mt3n4kw7zd26...
CVE-2026-55197
Hermes WebUI before 0.51.443 contains a broken access control vulnerability in the /api/session endpoint that allows authenticated users to disclose cross-profile session transcripts. Attackers can bypass profile boundary checks by directly querying session IDs belonging to other profiles via GET...
CVE-2026-53871
Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the getprofilecookie function that accepts unauthenticated profile names from the hermesprofile cookie. An authenticated attacker can forge the hermesprofile cookie value to bypass profile-scoped authorization checks a...
GHSA-4MPJ-78P6-RJ59 Duplicate Advisory: PickleScan's profile.run blocklist mismatch allows exec() bypass
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7wx9-6375-f5wh. This link is maintained to preserve external references. Original Description picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level...