CVE-2026-6895

creationtimestamp| type| source ---|---|--- 2026-06-06 11:03:01+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnmiwcfhwn25...

CVE-2026-9594

creationtimestamp| type| source ---|---|--- 2026-06-06 08:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmbzcm7py2s 2026-06-11 05:16:31+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyhvboui222 2026-06-11 05:22:45+00:00| seen|...

CVE-2026-9851

creationtimestamp| type| source ---|---|--- 2026-06-06 08:54:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmbqe5tjg2d 2026-06-07 00:01:36+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnnufs3hcp25 2026-06-07 01:30:28+00:00| seen|...

CVE-2025-15649

A flaw was found in perl-IO-Compress. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted zip file. The IO::Uncompress::Unzip module, which is part of perl-IO-Compress, does not properly handle malformed date information within a zip file'...

CVE-2026-9197

creationtimestamp| type| source ---|---|--- 2026-06-06 05:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlvhisxlp2d 2026-06-12 17:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo4akx4xhs2o...

CVE-2026-7795

creationtimestamp| type| source ---|---|--- 2026-06-06 04:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnluk6lqeo2l 2026-06-12 07:17:23+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo372m5iob2z...

CVE-2026-8893

creationtimestamp| type| source ---|---|--- 2026-06-06 01:40:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnljhg2k7c2w...

CVE-2026-6448

creationtimestamp| type| source ---|---|--- 2026-06-06 00:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgn6nqvl2e...

CVE-2026-10038

creationtimestamp| type| source ---|---|--- 2026-06-06 00:39:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlg3tfxl72o...

CVE-2026-11424

creationtimestamp| type| source ---|---|--- 2026-06-05 23:35:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlcjfbp5z27...

CVE-2026-45777

creationtimestamp| type| source ---|---|--- 2026-06-05 20:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzp3hx2y2k 2026-06-06 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnmc35xzgd2f 2026-06-06 09:00:35+00:00| seen|...

CVE-2026-11420

creationtimestamp| type| source ---|---|--- 2026-06-05 20:53:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzghaetw27 2026-06-06 03:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116700926764613870 2026-06-06 03:00:44+00:00| seen|...

CVE-2026-25620

creationtimestamp| type| source ---|---|--- 2026-06-05 20:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkyyhzhmc2p...

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

CVE-2026-49433

The DeepAI endpoint 'https://api.deepai.org/changeuseremail' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacker can change the user's email address and take over their account. Fixed on 2026-05-20...

CVE-2026-33386

QuickCMS is vulnerable to Cross-Site Scripting XSS through its insecure HTTP-based plugin‑fetching mechanism. A malicious attacker can perform a Man‑in‑the‑Middle MITM attack by impersonating the opensolution.org server and serving arbitrary HTML or JavaScript at the plugin list endpoint. When a...

CVE-2026-8495

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...

CVE-2025-41011

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specificcustomer', ussing 'startdateformatted' y 'enddateformatted'...

CVE-2025-65135

In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsdetails.php through the fromdate POST parameter...

CVE-2026-47325

ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth e.g., 12072000 for 12 July 2000. The application does not require or prompt users to change the password upon first login. This behavior...