CVE-2026-49317

creationtimestamp| type| source ---|---|--- 2026-05-29 17:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmz3gkkhag2x...

CVE-2026-45609

creationtimestamp| type| source ---|---|--- 2026-05-29 17:16:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmz22yzlts27...

EUVD-2026-33368

The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attackers within BLE range to perform unauthorized control of device functions, including starting/stopping activities,...

CVE-2026-10072

creationtimestamp| type| source ---|---|--- 2026-05-29 16:08:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmywblz34b27...

CVE-2026-46376

creationtimestamp| type| source ---|---|--- 2026-05-29 16:03:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyvyn3gkj2r 2026-05-29 19:00:04+00:00| seen| https://t.me/GithubRedTeam/86439 2026-05-29 19:00:46+00:00| seen| Telegram/0a4Mie4mnrD5nSuJkVgKyWL1alPSr-QiQEf3Sf43L8qbY...

CVE-2026-10042

creationtimestamp| type| source ---|---|--- 2026-05-29 15:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyvqxjkrw2j 2026-05-30 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn42hb7lav2i...

CVE-2026-44238

creationtimestamp| type| source ---|---|--- 2026-05-29 15:49:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyv6v6avj27...

CVE-2026-10071

creationtimestamp| type| source ---|---|--- 2026-05-29 15:33:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyudczgqp27 2026-05-30 23:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn45se2h4i25...

CVE-2026-45555

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyshvy2mo27...

CVE-2018-25382

Zechat 1.5 contains an SQL injection in the uname parameter that allows unauthenticated attackers to extract database information by injecting SQL through profile.php. The described payloads use UNION-based injections to enumerate table names, column names, and sensitive data from information_sch...

CVE-2018-25382 Zechat 1.5 SQL Injection via uname Parameter

Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attackers can send crafted requests to profile.php with UNION-based SQL injection payloads to retrieve table names, column...

CVE-2026-49093

creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-49095

creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-42398

creationtimestamp| type| source ---|---|--- 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-40528

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

EUVD-2026-33320

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...

CVE-2026-40528

OpenSC prior to 0.27.0 contains a stack and heap buffer overrun in do_key_value() (src/pkcs15init/profile.c). During pkcs15-init, a key value entry starting with '=' and exceeding the size of keybuf is copied via memcpy without length checking, causing memory corruption on both stack and heap. A ...

CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

OpenSC before 0.27.0, fixed in commit 0358817, contains a stack and heap buffer overrun vulnerability in the dokeyvalue function in src/pkcs15init/profile.c that allows attackers to corrupt memory by supplying a crafted profile configuration file. During pkcs15-init invocation, a key value entry...