CVE-2026-11117

creationtimestamp| type| source ---|---|--- 2026-06-05 10:02:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjv3g4tmw2k 2026-06-05 10:02:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjv3g4tmw2k 2026-06-05 13:24:10+00:00| seen|...

CVE-2026-11332

creationtimestamp| type| source ---|---|--- 2026-06-05 10:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuxqfc4o2r 2026-06-05 10:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuxqfc4o2r 2026-06-06 06:22:12+00:00| seen|...

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

CVE-2026-11171

creationtimestamp| type| source ---|---|--- 2026-06-05 07:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjkwwqsph22 2026-06-05 13:24:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-50590

creationtimestamp| type| source ---|---|--- 2026-06-05 05:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjej66sst2h...

CVE-2026-11326

creationtimestamp| type| source ---|---|--- 2026-06-05 04:48:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjditl4jc2h...

CVE-2026-50589

creationtimestamp| type| source ---|---|--- 2026-06-05 03:53:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjah6y5yp22 2026-06-06 02:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnllsiutgd2h...

CVE-2026-11309

creationtimestamp| type| source ---|---|--- 2026-06-05 03:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnja6ai2fh2h 2026-06-05 13:24:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11279

creationtimestamp| type| source ---|---|--- 2026-06-05 03:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnj5lde6ga2b 2026-06-05 13:24:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11292

creationtimestamp| type| source ---|---|--- 2026-06-05 02:59:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj5gev76y2n 2026-06-05 13:24:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11300

creationtimestamp| type| source ---|---|--- 2026-06-05 02:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj4vqtffw2b 2026-06-05 13:24:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11291

creationtimestamp| type| source ---|---|--- 2026-06-05 02:42:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj4j2ss7t2g 2026-06-05 13:24:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

PT-2026-47082

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 2026.05.1 Description An authenticated user with column-create permissions can perform SQL injection by setting a column title to a SQL fragment. This occurs because the bulk groupBy endpoint '/bulk groupBy' in...

HAXCMS 输入验证错误漏洞

HAXCMS is an open-source content management system developed by HAX The Web. Versions of HAXCMS prior to 26.0.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from unvalidated site creation requests, which could allow authenticated attackers to send...

Linqi 安全漏洞

Linqi is an English speaking practice platform developed by the German company Linqi. Linqi has a security vulnerability, which stems from a server-side request forgeing vulnerability in the custom process creation function. This vulnerability allows authenticated attackers to detect internal...

CVE-2024-27890

creationtimestamp| type| source ---|---|--- 2026-06-04 23:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnis6aopqb2o 2026-06-05 02:04:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnj2djhret23...

CVE-2026-43985

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3kpziq2q...

CVE-2026-5066

creationtimestamp| type| source ---|---|--- 2026-06-04 22:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnip2hi5672f...

CVE-2026-41249

creationtimestamp| type| source ---|---|--- 2026-06-04 21:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnijg3sqtc22 2026-06-04 22:21:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mninur6c7d2w 2026-06-04 22:47:45+00:00| seen|...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...