CVE-2026-32993

Improper sanitization of the status query parameter of the /unprotected/novaerror endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response...

CVE-2026-49372

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible...

CVE-2026-6512

The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete...

CVE-2026-33357

In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...

CVE-2026-4803

The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wprupdateformactionmeta AJAX action in all versions up to, and including, 1.7.1056. This is due to insufficient input sanitization and output escaping, combined with a...

CVE-2026-39331

ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API user can modify any family record's state without proper authorization by simply changing the familyId parameter in requests, regardless of whether they possess the required EditRecords privilege...

CVE-2026-8364

Gladinet Triofox Cloud Server Agent Access Service GladServerAgentService.exe listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache...

CVE-2026-8359

When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBinLoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not prese...

MINI-55C8-63MP-Q86W

Bulletin has no description...

MINI-J644-92Q2-QC36

Bulletin has no description...

MINI-3444-357Q-3JX2

Bulletin has no description...

MINI-G59Q-899H-4H8Q

Bulletin has no description...

GHSA-Q4GF-8MX6-V5V3

creationtimestamp| type| source ---|---|--- 2026-06-05 13:43:59+00:00| seen| https://gist.github.com/konard/9d39b6c3a9680a830d237c6c570f8933...

CVE-2026-11284

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11271

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11269

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11266

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11265

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-06 09:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnmc2zu24c2d 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11264

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11255

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-06 09:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnmc3bofrn2s 2026-06-07 18:00:00+00:00| seen|...