CVE-2026-44724

systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces when an active NetworkManager connection profile name contains shell metacharacters. The vulnerable value is obtained...

CVE-2026-46425

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n 2026-05-27 19:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i...

CVE-2026-42280

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-42758

creationtimestamp| type| source ---|---|--- 2026-05-27 12:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthiihcsk2w 2026-05-27 12:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtjcflqm22c...

CVE-2026-42747

creationtimestamp| type| source ---|---|--- 2026-05-27 11:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtfogikks2c 2026-05-27 12:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkkzhyw2t...

CVE-2026-40817

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40817 Unauthenticated SQLi in getAlarmProfiles function

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40817

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-8450

creationtimestamp| type| source ---|---|--- 2026-05-27 05:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222 2026-05-27 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116645011565190190 2026-05-27 06:00:29+00:00| seen|...

CVE-2026-2253

creationtimestamp| type| source ---|---|--- 2026-05-27 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmspyb5e7w2e 2026-05-27 05:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqr6mndi2i 2026-05-27 07:01:06+00:00| seen|...

CVE-2026-9312

creationtimestamp| type| source ---|---|--- 2026-05-27 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116643949752477544 2026-05-27 01:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsebabvvk26 2026-05-27 01:38:18+00:00| seen|...

PT-2026-43557

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alarms. MB Connect Line mymbCONNECT24 is an internal...

CVE-2026-45574

creationtimestamp| type| source ---|---|--- 2026-05-26 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xqtamf2e 2026-05-27 01:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdxxcrxo2r...

Hacker Selling 340 Million OnlyFans User Records Built From Old Breaches

A hacker is selling a 340M OnlyFans user database allegedly built by matching old breach data and public profiles to real OnlyFans accounts...

EUVD-2018-21875

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...

CVE-2026-8684

creationtimestamp| type| source ---|---|--- 2026-05-22 12:32:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgwvthkju2s 2026-05-22 12:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgygak4y32n 2026-05-26 06:38:53+00:00| seen|...

CVE-2026-25606

creationtimestamp| type| source ---|---|--- 2026-05-22 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-25606 2026-05-22 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116617761811334726 2026-05-22 10:30:31+00:00| seen|...

CVE-2026-43495

creationtimestamp| type| source ---|---|--- 2026-05-21 15:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmerpmotx72i 2026-05-22 05:29:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116616573200856013 2026-06-19 18:49:46+00:00| seen|...

CVE-2026-28764

creationtimestamp| type| source ---|---|--- 2026-05-21 12:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeeolb5mt26 2026-05-21 12:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmehfboenq2r 2026-05-21 16:30:09+00:00| seen|...