CVE-2026-6933

creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7z2bjzc2n 2026-06-16 09:23:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhyli5x32c 2026-06-16 12:05:58+00:00| seen|...

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users...

CVE-2026-12214

creationtimestamp| type| source ---|---|--- 2026-06-15 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocitrj45z2v 2026-06-15 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mocm7jz4ix2a 2026-06-15 06:00:33+00:00| seen|...

CVE-2026-54410

creationtimestamp| type| source ---|---|--- 2026-06-14 19:00:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobhcwfd6s2w 2026-06-14 20:02:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobkt6lb7w2r...

CVE-2026-11624

creationtimestamp| type| source ---|---|--- 2026-06-13 10:32:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mo62ehueb527 2026-06-13 11:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo65jxsbas2z 2026-06-17 14:37:00+00:00| seen|...

CVE-2026-9109

creationtimestamp| type| source ---|---|--- 2026-06-13 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116741978443656575 2026-06-13 09:01:21+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mo5vdj745l2x 2026-06-13 09:44:36+00:00| seen|...

CVE-2026-53521

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/id accepts and persists nonexistent ddnsprofiles IDs for a member-owned server. If another user later creates a DDNS profile with one of those...

CVE-2026-9266

creationtimestamp| type| source ---|---|--- 2026-06-12 07:09:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-594 2026-06-12 13:00:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sb5ojvv2o 2026-06-12 13:47:00+00:00| seen|...

CVE-2026-47369

creationtimestamp| type| source ---|---|--- 2026-06-12 05:22:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2yohqgv22p 2026-06-12 06:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo32tq5wkr2p 2026-06-12 19:13:13+00:00| seen|...

CVE-2026-48611

creationtimestamp| type| source ---|---|--- 2026-06-12 05:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xhfwjef24 2026-06-12 05:36:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2zi7lj7g2b 2026-06-12 18:51:21+00:00| seen|...

CVE-2026-44249

creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2h43or2t 2026-06-12 01:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2mj5sag22j 2026-06-15 04:37:06+00:00| seen|...

VulnCheck KEV: CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

CVE-2026-49973

creationtimestamp| type| source ---|---|--- 2026-06-11 22:42:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2cdqxxsm2g 2026-06-11 23:04:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo2dledkjf23 2026-06-15 00:01:40+00:00| seen|...

CVE-2026-38581

creationtimestamp| type| source ---|---|--- 2026-06-11 17:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzpc36i4v2g 2026-06-11 17:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzrdagmfn2m...

CVE-2026-9694

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 14:17:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzg4ypw7e24 2026-06-11 18:00:00+00:00| seen|...

CVE-2026-40998

creationtimestamp| type| source ---|---|--- 2026-06-11 09:41:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnywpflqyn2r 2026-06-11 10:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyxrpj3pv2i 2026-06-11 12:40:07+00:00| seen|...

CVE-2026-24187

creationtimestamp| type| source ---|---|--- 2026-06-11 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnydz7e3co2o 2026-06-11 04:07:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mnydzaulpn2f...

CVE-2026-35273

creationtimestamp| type| source ---|---|--- 2026-06-11 00:39:42+00:00| seen| https://www.acn.gov.it/portale/w/rilevata-vulnerabilita-in-oracle-1 2026-06-11 03:02:12+00:00| seen| https://bsky.app/profile/baldanders.info/post/3mnyaf4l2qg2y 2026-06-11 03:02:21+00:00| seen|...

CVE-2026-49956

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2025-6254

creationtimestamp| type| source ---|---|--- 2026-06-10 11:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwkntijit26 2026-06-10 11:11:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwlbd3rzn2c 2026-06-10 12:00:15+00:00| seen|...