CVE-2026-10124

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joqscdv2p 2026-05-30 17:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3kxusz622n...

CVE-2026-10123

creationtimestamp| type| source ---|---|--- 2026-05-30 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jnjsfjr26 2026-05-30 17:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3ld7z7nr2a...

CVE-2026-10121

creationtimestamp| type| source ---|---|--- 2026-05-30 17:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jn3k2yj26 2026-05-30 18:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3n6fjhzf2u...

CVE-2018-25410

SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to /admin/media.php with module=pengurus and act=editpengurus parameters containing SQ...

[BSA-135] Security Update for exim4

Andreas Metzler uploaded new packages for exim4 which fixed the following security problems: CVE-2026-48840 PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family 12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21. Previously a frame with...

CVE-2026-9757

creationtimestamp| type| source ---|---|--- 2026-05-30 13:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn34gdzo4b2q 2026-05-30 16:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3gegww3f2s 2026-09-29 12:47:21+00:00| seen|...

CVE-2026-47187

creationtimestamp| type| source ---|---|--- 2026-05-30 12:30:53+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116663533676457323 2026-05-30 13:03:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r 2026-06-13 20:17:04+00:00| seen|...

CVE-2026-10116

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogssbixactadd in the library /lib/core/ogs-timer.c of the component ue-authentications Endpoint. Performing a manipulation results in denial of service. The attack may be initiated remotely. The...

CVE-2026-7465

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

CVE-2026-7465 Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

CVE-2026-7465 Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

EUVD-2026-33454

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

CVE-2026-7465

Summary (supported by provided documents): CVE-2026-7465 affects the WordPress plugin Spectra Gutenberg Blocks (ultimate-addons-for-gutenberg). In versions up to and including 2.19.25, an authenticated Contributor can influence post block attributes in uagb/* blocks, which are dynamically registe...

CVE-2026-7465

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

CVE-2026-7100

creationtimestamp| type| source ---|---|--- 2026-05-30 09:07:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mn2p6mqkzu2s 2026-05-30 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mn2p6may4g23...

CVE-2026-10111

creationtimestamp| type| source ---|---|--- 2026-05-30 09:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn2oysarp62g 2026-05-30 10:46:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn2uqofazn2e...

CVE-2026-10126

creationtimestamp| type| source ---|---|--- 2026-05-30 08:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-10126 2026-05-30 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3sacepx62n 2026-05-30 20:00:42+00:00| seen|...

SUSE CVE-2026-48524

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.getsigningkey forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited...

CVE-2026-27136 affecting package gh for versions less than 2.62.0-16

CVE-2026-27136 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...