28119 matches found
CVE-2026-50212
creationtimestamp| type| source ---|---|--- 2026-06-04 10:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhh5wuoi52g...
CVE-2026-49189
creationtimestamp| type| source ---|---|--- 2026-06-04 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnh44fcjsw2f 2026-06-04 07:30:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116690663960529131 2026-06-04 07:43:12+00:00| seen|...
CVE-2026-7764
creationtimestamp| type| source ---|---|--- 2026-06-04 06:37:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngz5xiqip26...
CVE-2026-44939
creationtimestamp| type| source ---|---|--- 2026-06-04 02:26:12+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mngl44gers2h 2026-06-19 14:18:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116777203438598649 2026-06-19 16:30:26+00:00| seen|...
CVE-2026-35078
creationtimestamp| type| source ---|---|--- 2026-06-04 00:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcyeoy6b2f 2026-06-09 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnt4es3l462h 2026-07-03 23:47:51+00:00| seen|...
PT-2026-46293
Name of the Vulnerable Software and Affected Versions Neterbit NW-431F Router versions prior to 20241014-IR03 Description The SMS module contains a stored Cross-Site Scripting XSS issue, where the application fails to properly sanitize user input within SMS messages before they are stored and...
Photon OS 5.0: Python3 PHSA-2026-5.0-0862
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-46313
Name of the Vulnerable Software and Affected Versions SQLite sqldiff.exe versions prior to 2025-12-26 Description The sqldiff.exe utility does not securely handle the conversion of Unicode characters to ANSI codepages by the Microsoft Windows C runtime. An attacker can exploit this by using the...
GHSA-34QG-65M4-F23M
creationtimestamp| type| source ---|---|--- 2026-06-03 22:11:20+00:00| seen| https://gist.github.com/alon710/067712fc0b9798c132c204b55ab42a44...
CVE-2026-40495
creationtimestamp| type| source ---|---|--- 2026-06-03 21:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng2hfdmyg2m...
CVE-2026-10766
creationtimestamp| type| source ---|---|--- 2026-06-03 21:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng26gc5iq2c...
CVE-2026-44609
creationtimestamp| type| source ---|---|--- 2026-06-03 21:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfzetqikh2d...
CVE-2026-45702
creationtimestamp| type| source ---|---|--- 2026-06-03 20:58:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyspp2iz27...
EUVD-2026-34094
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth e.g., 12072000 for 12 July 2000. The application does not require or prompt users to change the password upon first login. This behavior...
CVE-2026-47325 Weak password policy in ProjectsAndPrograms school-management-system
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth e.g., 12072000 for 12 July 2000. The application does not require or prompt users to change the password upon first login. This behavior...
CVE-2026-47325
The CVE-2026-47325 entry concerns the ProjectsAndPrograms school-management-system, where passwords for students and teachers are generated solely from the user’s date of birth (e.g., 12072000), and there is no forced password change at first login. Affected status: the version tied to commit 6b6...
CVE-2026-47325
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth e.g., 12072000 for 12 July 2000. The application does not require or prompt users to change the password upon first login. This behavior...
RUSTSEC-2026-0171 `logflux` was removed from crates.io for malicious code
The logflux crate attempted to download and run a malicious payload on the user's machine. The malicious crate had 1 version published on 2026-04-26, approximately 1 month before removal, and had no evidence of actual usage. This crate had no dependencies on crates.io. Thanks to Paweł Bis for...
CVE-2026-50052
creationtimestamp| type| source ---|---|--- 2026-06-03 06:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mneitu3vm62y 2026-07-01 15:53:32+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mplusru77t2f 2026-07-01 18:26:41+00:00| seen|...