CVE-2026-4057

creationtimestamp| type| source ---|---|--- 2026-04-10 02:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4aebbuw32s 2026-04-19 13:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mju2whq7ln2s...

CVE-2026-3360 Tutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authentication and authorization checks in the payincompleteorder function. The function accepts an...

CVE-2026-3360 Tutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authentication and authorization checks in the payincompleteorder function. The function accepts an...

CVE-2026-3360

The CVE concerns Tutor LMS for WordPress, affecting all versions up to 3.9.7. The root cause is an Insecure Direct Object Reference in pay_incomplete_order(), which accepts an attacker-controlled order_id and uses it to fetch order data, then overwrites the order owner’s billing fields (name, ema...

CVE-2026-5991

creationtimestamp| type| source ---|---|--- 2026-04-10 01:19:22+00:00| published-proof-of-concept| Telegram/BbEIcdIV40x7T9MMril6ukSAKgSf88SJJjfMMNuw6irzUIE 2026-04-10 01:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj46e4n4gg22 2026-05-29 07:37:06+00:00| seen|...

CVE-2026-5992

creationtimestamp| type| source ---|---|--- 2026-04-10 01:19:22+00:00| published-proof-of-concept| Telegram/BbEIcdIV40x7T9MMril6ukSAKgSf88SJJjfMMNuw6irzUIE 2026-04-10 01:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj46n3a7xs2i 2026-05-26 09:37:05+00:00| seen|...

CVE-2026-5988

creationtimestamp| type| source ---|---|--- 2026-04-10 01:10:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj45acmzd22o 2026-04-10 01:19:02+00:00| seen| Telegram/r2aLRB54IhOSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8 2026-04-30 01:07:07+00:00| seen|...

📄 Authentic 8 User Profile Insecure Direct Object Reference

Proof of concept exploit that demonstrates user data exposure via an insecure direct object reference and missing access control vulnerabilities in the User Profile endpoint of Authentic 8...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.24 contained security vulnerabilities. These vulnerabilities stemmed from improper authorization in the POST /reset-profile endpoint, which could allow callers with the...

PT-2026-31964

OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write access to browser.request to bypass profile mutation restrictions. Attackers can invoke POST /reset-profile through the...

USN-8165-1: Linux kernel (Azure FIPS) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-5977

creationtimestamp| type| source ---|---|--- 2026-04-09 23:29:26+00:00| published-proof-of-concept| Telegram/RnbO6h7rE-8F1e1uXIlS73R4kRuAIo63byQ11pUP09Fz6LA 2026-04-10 07:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4u4gsjkx2w...

USN-8163-1: Linux kernel (Azure FIPS) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2019-25669

creationtimestamp| type| source ---|---|--- 2026-04-09 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj3wdnyeyi2u 2026-04-10 02:29:15+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s...

CVE-2026-35637

creationtimestamp| type| source ---|---|--- 2026-04-09 22:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3uatzhgb2j 2026-04-09 23:30:23+00:00| published-proof-of-concept| Telegram/n2dd6XRjJv9G8jt1S2EaZawu98TdZ3-sGq35ZGwXZFcMAwI 2026-04-09 23:30:34+00:00| seen|...

CVE-2026-35645

creationtimestamp| type| source ---|---|--- 2026-04-09 22:27:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3u4dz3n322 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-10 07:08:19+00:00| seen|...

CVE-2026-34734

creationtimestamp| type| source ---|---|--- 2026-04-09 21:22:18+00:00| published-proof-of-concept| Telegram/J52JBZg8WrLGGx6kRSNOXLCMOEds74O2ZZxihtNidTT3Fd0 2026-04-12 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbrq7mprz2a 2026-06-14 19:07:07+00:00| seen|...

CVE-2025-43517

creationtimestamp| type| source ---|---|--- 2026-04-09 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pez5rau2n...

CVE-2026-40089

creationtimestamp| type| source ---|---|--- 2026-04-09 20:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3p4r7jpv2d 2026-04-09 21:22:41+00:00| published-proof-of-concept| Telegram/3Mh7UNYEFXpMlnqwZliCqvVomRJKwd1lMrCq1dUb7HxJoTM 2026-04-10 08:07:45+00:00| seen|...

CVE-2026-35063

creationtimestamp| type| source ---|---|--- 2026-04-09 20:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3ovqaia32n 2026-04-09 21:22:18+00:00| published-proof-of-concept| Telegram/J52JBZg8WrLGGx6kRSNOXLCMOEds74O2ZZxihtNidTT3Fd0 2026-04-09 21:22:41+00:00|...