MINI-X7XG-RVWP-6374

Bulletin has no description...

Exploit for CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...

CGA-R78V-2M6W-5437

Bulletin has no description...

CVE-2026-44250

creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...

VRChat says reported data breach never happened

A data breach notice has been filed with the Maine Attorney General, saying more than 2.4 million users of VRChat have had their data breached. The question is, was it VRChat who filed the breach notice, or did someone pretending to represent the company post it instead? On Reddit, a VRChat...

CVE-2026-40995

CVE-2026-40995 affects Spring Web Services versions 3.1.0–3.1.8, 4.0.0–4.0.18, 4.1.0–4.1.3, and 5.0.0–5.0.1. The issue arises in the X509AuthenticationProvider, which could issue a fully authenticated X509AuthenticationToken when a presented certificate maps to a UserDetails, without applying Spr...

Chatwoot Scanner

This is a security assessment tool designed to evaluate authentication status, response behavior, and possible exposure indicators in Chatwoot conversation filtering functionality...

VMware Spring Web Services 安全漏洞

VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from the...

ALSA-2026:25341 Important: tomcat9 update

Certificate revocation bypass due to improper OCSP response validation...

GHSA-P9CG-VQCC-GRCX

creationtimestamp| type| source ---|---|--- 2026-06-10 22:51:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsdlo6672x...

CVE-2026-47946

creationtimestamp| type| source ---|---|--- 2026-06-10 20:04:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj25bawp22...

CVE-2026-0268

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:28+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfn3qd3i2w 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 23:32:18+00:00| seen|...

CVE-2026-0267

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...

MGASA-2026-0192 Updated postfix packages fix security vulnerability

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. CVE-2026-43964...

Updated postfix packages fix security vulnerability

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. CVE-2026-43964...

CVE-2026-49840

creationtimestamp| type| source ---|---|--- 2026-06-10 16:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnx5hdfrqi2f...

GHSA-H25M-26QC-WCJF

creationtimestamp| type| source ---|---|--- 2026-06-10 16:20:08+00:00| seen| https://gist.github.com/jmcveen/2d2b8e075a88abf882695479e38437d1...

CVE-2026-53439

creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...

CVE-2026-52759

creationtimestamp| type| source ---|---|--- 2026-06-10 15:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy3uedfc2f...

CVE-2026-53471

CVE-2026-53471 affects the migration-planner project, specifically the agent-api middleware. The UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the source_id claim in JWTs against the requested source ID. Root cause: missing validation allows an authenticated attacker with ...