CVE-2026-35447

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

EUVD-2026-33982

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-35447

NamelessMC web software (Minecraft servers) is affected by CVE-2026-35447 in version 2.2.4. The flaw resides in the profile page (modules/Core/pages/profile.php), where wall post submissions and replies are processed before verifying the viewer’s authorization. This allows any user with the profi...

CVE-2026-9844

creationtimestamp| type| source ---|---|--- 2026-06-02 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncysm7a7a2b...

CVE-2026-40314

NamelessMC (Minecraft server website software) 2.2.4 is affected by an authorization issue where core/classes/Misc/ProfilePostReactionContext.php only verifies the wall post exists and fails to enforce blocked/private-profile visibility, while modules/Core/queries/reactions.php permits unauthenti...

CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions

GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected...

CVE-2026-9723

creationtimestamp| type| source ---|---|--- 2026-06-02 09:16:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncb3flh4q2c 2026-06-03 06:15:27+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnehhd4hyu2t...

CVE-2026-4080

creationtimestamp| type| source ---|---|--- 2026-06-02 09:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncasrblmr25...

CVE-2026-10568

creationtimestamp| type| source ---|---|--- 2026-06-02 05:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbturbbnw2v...

CVE-2026-10548

creationtimestamp| type| source ---|---|--- 2026-06-02 05:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbt5gaofz22...

CVE-2026-3198

creationtimestamp| type| source ---|---|--- 2026-06-02 04:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbs4zpp6f2f...

CVE-2026-10114

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handlescpinfo in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been...

CVE-2026-34907

creationtimestamp| type| source ---|---|--- 2026-06-02 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-34906 2026-06-02 13:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnconxngwd2f...

CVE-2026-28511

creationtimestamp| type| source ---|---|--- 2026-06-02 01:36:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbhf6duse25...

CVE-2026-10514

creationtimestamp| type| source ---|---|--- 2026-06-02 01:16:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbgbdnijw2z...

CVE-2026-24752

creationtimestamp| type| source ---|---|--- 2026-06-02 01:04:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfiigx7k2q...

CVE-2026-40965

creationtimestamp| type| source ---|---|--- 2026-06-02 00:10:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbcme5lcc2s 2026-06-24 21:16:11+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mp2tlbjjbs2z...