CVE-2026-27182

creationtimestamp| type| source ---|---|--- 2026-02-18 22:19:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64f45rza25 2026-02-19 21:03:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikmcnkp2i...

CVE-2025-70064

creationtimestamp| type| source ---|---|--- 2026-02-18 20:24:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5vwdwf6w2s 2026-02-19 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikm5ejf2h...

CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints updateprofilepicture.php and uploadpicture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied...

CVE-2026-1368

creationtimestamp| type| source ---|---|--- 2026-02-18 16:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5hbrjnjj26 2026-04-29 00:56:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1368.yaml...

CVE-2025-33251

creationtimestamp| type| source ---|---|--- 2026-02-18 15:18:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5etprah42s...

CVE-2025-33250

creationtimestamp| type| source ---|---|--- 2026-02-18 15:05:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5e4l3br42u...

CVE-2020-28469

creationtimestamp| type| source ---|---|--- 2026-02-18 15:05:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf5e4b4px32q 2026-02-20 13:38:22+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-prodotti-atlassian 2026-03-18 00:00:00+00:00| seen|...

CVE-2025-33243

creationtimestamp| type| source ---|---|--- 2026-02-18 15:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5dvx2z3e2u...

CVE-2025-60038

creationtimestamp| type| source ---|---|--- 2026-02-18 14:32:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5cbu7hpz2t 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-110/...

CVE-2025-60035

creationtimestamp| type| source ---|---|--- 2026-02-18 14:18:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5biceh3r2n 2026-02-18 14:18:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5bj4fgfo2d 2026-02-19 05:00:00+00:00| seen|...

CVE-2025-33252

creationtimestamp| type| source ---|---|--- 2026-02-18 14:18:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5bhtpgd72s 2026-02-18 14:18:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5bio2fvx2s...

CVE-2026-1436

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2026-2329

creationtimestamp| type| source ---|---|--- 2026-02-18 14:15:27+00:00| seen| https://bsky.app/profile/rapid7.com/post/3mf5bcv6wbk2u 2026-02-18 14:39:38+00:00| seen| https://bsky.app/profile/stephenfewer.bsky.social/post/3mf5co4ojok22 2026-02-18 15:30:37+00:00| seen|...

CVE-2026-1436 Improper Access Control (IDOR) vulnerability in Graylog Web Interface

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2026-1436 Improper Access Control (IDOR) vulnerability in Graylog Web Interface

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2026-1436 Improper Access Control (IDOR) vulnerability in Graylog Web Interface

Improper Access Control IDOR in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive...

CVE-2026-1436

Graylog API vulnerability CVE-2026-1436 affects Graylog API version 2.2.3. An authenticated user can access other users’ profiles by altering the URL /users/, due to missing object‑level authorization checks on that endpoint (http://:12900/users/). Impact includes exposure of names, emails, inter...

CVE-2026-24734

creationtimestamp| type| source ---|---|--- 2026-02-18 07:35:39+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mf4kxjtp4c2e 2026-02-18 09:40:36+00:00| seen| https://bsky.app/profile/osanpo.bsky.social/post/3mf4rxhluqb2o 2026-02-18 15:05:31+00:00| seen|...

CVE-2026-1714

creationtimestamp| type| source ---|---|--- 2026-02-18 05:20:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dg4om5y2n 2026-02-18 05:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dgodgjv2c...

CVE-2026-2576

creationtimestamp| type| source ---|---|--- 2026-02-18 05:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dfvkk7t2s 2026-02-18 05:20:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4dgh6zvt2v 2026-03-27 00:00:04+00:00|...