CVE-2026-47346

Summary: CVE-2026-47346 affects TYPO3 CMS prior to certain patch versions, where backend users with file write perms can upload form definition files with mixed-case extensions (e.g., .FORM.YAML) to bypass upload restrictions. This can be exploited to execute arbitrary SQL statements and escalate...

CVE-2026-11607 TYPO3 CMS - Broken Access Control in Form Framework

Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, which were processed without denying the incorrect file extension. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

CVE-2026-11607

Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, which were processed without denying the incorrect file extension. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

CVE-2023-29331

creationtimestamp| type| source ---|---|--- 2026-06-09 09:46:02+00:00| seen| https://infosec.exchange/users/certvde/statuses/116719508098466554...

Exploit for CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 las...

CVE-2026-10727

creationtimestamp| type| source ---|---|--- 2026-06-09 08:30:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-567 2026-06-10 02:18:20+00:00| seen| https://www.acn.gov.it/portale/w/ivanti-june-security-update-1 2026-06-10 13:15:21+00:00| seen|...

CVE-2026-24349

creationtimestamp| type| source ---|---|--- 2026-06-09 07:30:01+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-22 2026-06-09 11:57:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu5epvqfc25 2026-06-09 12:30:13+00:00| seen|...

CVE-2026-46749

creationtimestamp| type| source ---|---|--- 2026-06-09 07:30:01+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-22 2026-06-09 11:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnu273c2t32n 2026-06-23 05:00:00+00:00| seen|...

CVE-2026-8499

creationtimestamp| type| source ---|---|--- 2026-06-09 07:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnto3pp7i72m 2026-06-11 15:16:16+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnzjfhayk42t...

CVE-2026-5067

creationtimestamp| type| source ---|---|--- 2026-06-09 07:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmrkv26t24 2026-06-09 07:31:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntoigel5i2r...

CVE-2026-9662

creationtimestamp| type| source ---|---|--- 2026-06-09 06:06:24+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mntjfl5xe42o 2026-06-09 07:13:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnisftxr2v 2026-06-10 06:16:06+00:00| seen|...

CVE-2026-9185

creationtimestamp| type| source ---|---|--- 2026-06-09 06:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mntjfe72uq2k 2026-06-09 07:35:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntoq43xxa2j 2026-06-09 15:05:15+00:00| seen|...

GHSA-22M2-HVR2-XQC8

creationtimestamp| type| source ---|---|--- 2026-06-09 02:27:39+00:00| seen| https://gist.github.com/lyuyun/60b1d6a8ad599cf3430761a4b380b17e 2026-07-06 14:20:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpybw7ndmy2r...

SUSE CVE-2026-46311

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drmexec to take both locks i.e vm root bo and wptrobj bo to access the mapping data properly. This fixes the security issue of unmap the wptrobj while a queue creation is in...

CVE-2026-40128

creationtimestamp| type| source ---|---|--- 2026-06-09 01:20:31+00:00| seen| https://www.acn.gov.it/portale/w/sap-security-patch-day-17 2026-06-09 03:02:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116717913644166220 2026-06-09 03:20:44+00:00| seen|...

CVE-2026-36722

CVE-2026-36722 is an authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3. The issue allows an attacker with valid credentials to upload a crafted file and potentially execute arbitrary code. All documented sources describe the same vulnerabili...

EulerOS 2.0 SP11 : python-virtualenv (EulerOS-SA-2026-2227)

According to the versions of the python-virtualenv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...

GHSA-V4P8-MG3P-G94G

creationtimestamp| type| source ---|---|--- 2026-06-08 22:07:55+00:00| seen| https://infosec.exchange/users/secdb/statuses/116716025409567659 2026-07-06 12:56:58+00:00| seen| https://bsky.app/profile/alphahunt.io/post/3mpy5bjtqac2z 2026-07-06 12:56:58+00:00| seen|...

CVE-2026-44185

creationtimestamp| type| source ---|---|--- 2026-06-08 21:47:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsntyk2bp2g 2026-06-09 11:25:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116719900071495044 2026-06-09 12:35:09+00:00| seen|...

CVE-2026-25856

creationtimestamp| type| source ---|---|--- 2026-06-08 19:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnshtinjdu23 2026-06-08 23:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsrx3xuwo2y...