58968 matches found
VMware Cloud Foundation Operations 安全漏洞
VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...
PT-2026-47293
Name of the Vulnerable Software and Affected Versions SourceCodester Inventory System version 1.0 Description An improper authorization issue exists in the Account Creation Handler component within the file '/Product Inventory/api/users handler.php'. A remote attacker can manipulate the ROLE...
Flowise 安全漏洞
Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.1.2 contained a security vulnerability. This vulnerability stemmed from a batch assignment issue during the creation and updating of assistants, which could lead to...
PT-2026-47382
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/userq component where stale wptr mapping is accessed. This occurs when the wptr obj is unmapped while queue creation is in progress, allowing another...
Important: postgresql
Issue Overview: Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions...
Important: postgresql17
Issue Overview: Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions...
VMware Cloud Foundation Operations 安全漏洞
VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...
CVE-2026-11460
creationtimestamp| type| source ---|---|--- 2026-06-07 20:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnpzmz7i4y2o 2026-06-07 21:59:24+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnq62vmklq2k...
CVE-2026-11453
creationtimestamp| type| source ---|---|--- 2026-06-07 04:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnodh6oluy2a 2026-06-07 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116706942877312373...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one e...
CVE-2026-46357
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a specially crafted site creation request to the createSite endpoint. A single request is sufficient to take the entire...
GHSA-45VW-WH46-2VX8
creationtimestamp| type| source ---|---|--- 2026-06-06 23:55:29+00:00| seen| https://gist.github.com/vladko312/39507beaa58eacf3b62e6a6e6cd69128...
CVE-2026-28480
creationtimestamp| type| source ---|---|--- 2026-06-06 23:13:33+00:00| seen| https://gist.github.com/JasonCSJason/fbcd9f9c26ac2d1fe8468c7979845327...
CVE-2026-11439
creationtimestamp| type| source ---|---|--- 2026-06-06 20:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnjregbbn2m...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx
FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exp...
CVE-2026-11441
creationtimestamp| type| source ---|---|--- 2026-06-06 20:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnjgmgp5p2x...
CVE-2026-11437
creationtimestamp| type| source ---|---|--- 2026-06-06 19:10:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnne64vkxu2d 2026-06-06 20:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnnj5nyxej2f 2026-06-08 02:06:23+00:00| seen|...
CVE-2026-9617
A flaw was found in PostgreSQL Anonymizer. A user with specific table creation privileges can exploit this vulnerability by embedding malicious code within a column identifier when creating a table. If a superuser subsequently invokes the k-anonymity function, the embedded malicious code is...