23200 matches found
EUVD-2026-34253
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/changeprofileimage.php. Executing a manipulation of the argument prprofileimage can lead to unrestricted upload. The attack may be launched remotely. The...
CVE-2026-10807 mjperpinosa stumasy change_profile_image.php unrestricted upload
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/changeprofileimage.php. Executing a manipulation of the argument prprofileimage can lead to unrestricted upload. The attack may be launched remotely. The...
CVE-2026-10807
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/changeprofileimage.php. Executing a manipulation of the argument prprofileimage can lead to unrestricted upload. The attack may be launched remotely. The...
CVE-2026-10807
The CVE-2026-10807 entry concerns mjperpinosa stumasy, affecting the unknown function in application/PHP/objects/profiles/change_profile_image.php. The issue allows an attacker to manipulate the pr_profile_image argument to achieve unrestricted upload, with remote exploitation. Public exploit dis...
CVE-2026-49858
creationtimestamp| type| source ---|---|--- 2026-06-04 12:08:39+00:00| seen| https://bsky.app/profile/soyuka.me/post/3mnhlnpjjpc23 2026-06-05 02:30:47+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f 2026-07-02 11:52:41+00:00| seen|...
ImageMagick: Fix of CVE-2026-30883
CVE-2026-30883: fix heap overflow when encoding PNG with oversized profile...
CVE-2026-50226
creationtimestamp| type| source ---|---|--- 2026-06-04 11:24:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhj6jvfsw2p...
CVE-2026-47306
creationtimestamp| type| source ---|---|--- 2026-06-04 10:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhfenxnv2e...
CVE-2026-50212
creationtimestamp| type| source ---|---|--- 2026-06-04 10:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhh5wuoi52g...
CVE-2026-50211
creationtimestamp| type| source ---|---|--- 2026-06-04 10:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgrli5m32d 2026-06-04 19:56:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116693597828292612...
CVE-2026-47318
creationtimestamp| type| source ---|---|--- 2026-06-04 10:39:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgovcrqs2p...
Meta’s AI support bot happily handed Instagram accounts to hackers
Customer service chatbots have one job: get the user what they're asking for without bothering a human. Meta's new AI support assistant took that brief a little too seriously. Over the past few months, attackers have been opening support chats, telling the bot they were locked out of Instagram...
CVE-2021-27137
creationtimestamp| type| source ---|---|--- 2026-06-04 09:00:51+00:00| seen| https://infosec.exchange/users/VirusBulletin/statuses/116691019017195575 2026-06-04 09:00:52+00:00| seen| https://bsky.app/profile/virusbtn.bsky.social/post/3mnhb5w3wbk2o 2026-06-05 03:00:26+00:00| seen|...
EUVD-2026-34225
The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings...
CVE-2026-50213 Bulk User Private Data Harvesting
The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings...
CVE-2026-49186
creationtimestamp| type| source ---|---|--- 2026-06-04 07:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnh3yc4mof24...
CVE-2026-50206
Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files...
CVE-2026-49203
Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted...