3121 matches found
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-40314
NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...
PT-2026-45801
NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...
CVE-2026-9330
creationtimestamp| type| source ---|---|--- 2026-06-01 16:50:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26 2026-06-01 19:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatq63y672c 2026-06-04 20:35:04+00:00| seen|...
USN-8209-2: Little CMS vulnerability
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use thi...
USN-8209-2 lcms2 vulnerability
USN-8209-1 fixed vulnerabilities in Little CMS. This update contains the fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use thi...
CVE-2026-7858
creationtimestamp| type| source ---|---|--- 2026-06-01 12:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna3qiivt22p 2026-06-01 14:05:55+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnaasqd4ld2y...
CVE-2026-10164
creationtimestamp| type| source ---|---|--- 2026-05-31 04:57:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4rocjfim2q 2026-05-31 05:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4ruozarc2r 2026-05-31 06:00:28+00:00| seen|...
CVE-2026-8594
creationtimestamp| type| source ---|---|--- 2026-05-30 17:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3ljwyje52a 2026-05-30 17:47:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn3mbfa6u42m...
CVE-2026-10125
creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joxxx5e2m 2026-05-30 17:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3m2li2nr2n...
CVE-2026-7459
creationtimestamp| type| source ---|---|--- 2026-05-30 10:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mn2ttkka6g2e 2026-05-30 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116663059987255369 2026-05-30 16:02:08+00:00| seen|...
CVE-2026-10126
creationtimestamp| type| source ---|---|--- 2026-05-30 08:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-10126 2026-05-30 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3sacepx62n 2026-05-30 20:00:42+00:00| seen|...
CVE-2026-45787
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common...
CVE-2026-49128
creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4mj22h2e 2026-05-28 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwykn46cb2k...
CVE-2026-44465
creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5all6z2l 2026-05-28 19:40:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrnb4ih62c 2026-06-02 21:37:06+00:00| seen|...
CVE-2026-41565
creationtimestamp| type| source ---|---|--- 2026-05-28 17:08:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwj5n24dt2i 2026-05-28 21:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwy7jdkba24 2026-06-07 15:42:03+00:00| seen|...
CVE-2026-49238
creationtimestamp| type| source ---|---|--- 2026-05-28 15:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwby5t6o32c 2026-05-28 15:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmweoupup52n 2026-06-01 15:07:07+00:00| seen|...