PT-2026-39178

It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could possibly use this issue to cause Little CMS to crash, resulting in a denial of service...

Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

A reflected XSS vulnerability was found under admin panel - System - Import/Export - Dataflow - Profiles. Steps to produce + Login to the admin panel + Go to the path System - Import/Export - Dataflow - Profiles + Select profile direction as Import. + Click on Import Customers + Upload the file...

GHSA-X8JV-Q8J2-487C Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

A reflected XSS vulnerability was found under admin panel - System - Import/Export - Dataflow - Profiles. Steps to produce + Login to the admin panel + Go to the path System - Import/Export - Dataflow - Profiles + Select profile direction as Import. + Click on Import Customers + Upload the file...

CVE-2026-43580

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kz6t5qe2n 2026-05-06 21:38:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nx6b5ai2n...

CVE-2026-44115

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kisf6b72q 2026-05-06 20:36:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kju767w2c 2026-05-06 21:49:50+00:00| seen|...

CVE-2026-44114

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kikwji62c 2026-05-06 20:36:11+00:00| seen| https://bsky.app/profile/potato.software/post/3ml7kimjqq52w 2026-05-06 20:36:45+00:00| seen|...

EUVD-2026-27864

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-20219

Cisco Slido REST API contains an insecure direct object reference that could let an authenticated, remote attacker view other users’ social profiles or affect quiz/poll results via a crafted request. Impact described as low confidentiality and integrity impact, with no availability impact. Cisco ...

Incorrect Authorization

Overview auth0-js is an Auth0 headless browser sdk Affected versions of this package are vulnerable to Incorrect Authorization via token validation. An attacker can gain unauthorized access to user profile information by providing a specifically crafted invalid ID token along with a valid access...

CVE-2026-40562

creationtimestamp| type| source ---|---|--- 2026-05-06 16:55:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml765woa7b2s 2026-05-06 17:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76ietizz2n...

Cisco Slido Insecure Direct Object Reference Vulnerability

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2025-71253

creationtimestamp| type| source ---|---|--- 2026-05-06 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5ydnqr3a2p 2026-05-06 05:55:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5zc4mn572o 2026-05-06 18:59:57+00:00| seen|...

PT-2026-38267

Name of the Vulnerable Software and Affected Versions Magento Long Term Support LTS versions prior to 20.18.0 Description A reflected cross-site scripting XSS issue exists within the admin panel under System - Import/Export - Dataflow - Profiles. The flaw occurs when a filename is reflected in HT...

CVE-2026-42088

creationtimestamp| type| source ---|---|--- 2026-05-04 18:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwjcjwo2n 2026-05-04 18:37:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cwddwoq2v 2026-09-12 10:00:17+00:00| seen|...

CVE-2026-42796

creationtimestamp| type| source ---|---|--- 2026-05-04 18:19:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwbqkzy2k 2026-05-04 18:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dhoyfqj2k 2026-05-08 11:00:05+00:00| seen|...

CVE-2026-42079

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgbykt22w 2026-05-04 18:11:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhdmvyd2c...

CVE-2026-42376

creationtimestamp| type| source ---|---|--- 2026-05-04 17:02:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517380246425239 2026-05-04 18:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2autcjzk2f 2026-05-04 18:44:20+00:00| seen|...