CVE-2026-46357

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a specially crafted site creation request to the createSite endpoint. A single request is sufficient to take the entire...

GHSA-45VW-WH46-2VX8

creationtimestamp| type| source ---|---|--- 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128...

CVE-2026-28480

creationtimestamp| type| source ---|---|--- 2026-06-06 23:13:33+00:00| seen| https://gist.github.com/JasonCSJason/fbcd9f9c26ac2d1fe8468c7979845327...

CVE-2026-11439

creationtimestamp| type| source ---|---|--- 2026-06-06 20:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnjregbbn2m...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exp...

CVE-2026-11441

creationtimestamp| type| source ---|---|--- 2026-06-06 20:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnjgmgp5p2x...

CVE-2026-11437

creationtimestamp| type| source ---|---|--- 2026-06-06 19:10:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnne64vkxu2d 2026-06-06 20:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnj5nyxej2f 2026-06-08 02:06:23+00:00| seen|...

CVE-2026-9617

A flaw was found in PostgreSQL Anonymizer. A user with specific table creation privileges can exploit this vulnerability by embedding malicious code within a column identifier when creating a table. If a superuser subsequently invokes the k-anonymity function, the embedded malicious code is...

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injectio...

CVE-2026-11412

creationtimestamp| type| source ---|---|--- 2026-06-06 12:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmow7vypb2d...

CVE-2026-11346

A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...

CVE-2026-10725

creationtimestamp| type| source ---|---|--- 2026-06-06 10:16:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnmgcrwzlv2y 2026-06-06 12:55:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmp76d7u52y 2026-06-09 01:00:48+00:00| seen|...

CVE-2026-7624

creationtimestamp| type| source ---|---|--- 2026-06-06 08:44:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmb6h7h7r24...

CVE-2026-8450

A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...

CVE-2026-36785

creationtimestamp| type| source ---|---|--- 2026-06-06 06:35:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116701770935130535...

CVE-2026-7665

creationtimestamp| type| source ---|---|--- 2026-06-06 05:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlv6kfnev25 2026-06-11 11:00:12+00:00| published-proof-of-concept| Telegram/bfOUhtYO5knJKojifOKxt7hZq78r0zHfwCUUuIAza2Gk...

CVE-2023-34282

creationtimestamp| type| source ---|---|--- 2026-06-06 05:01:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnlupg7x5h2r...

CVE-2026-7796

creationtimestamp| type| source ---|---|--- 2026-06-06 04:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltxah2uj2n 2026-06-12 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3t5sjpha2w...

CVE-2026-2500

creationtimestamp| type| source ---|---|--- 2026-06-06 04:43:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltpsj7f42a 2026-06-12 18:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo4dwabh6h2w...

CVE-2026-9719

creationtimestamp| type| source ---|---|--- 2026-06-06 01:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnljqeibuv2e 2026-06-13 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo6abgshyp2i...