CVE-2026-46398

creationtimestamp| type| source ---|---|--- 2026-06-05 21:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl3rq4wz32z...

CVE-2026-45779

creationtimestamp| type| source ---|---|--- 2026-06-05 21:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl37s4oma2i 2026-06-06 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116701988411720814 2026-06-06 07:30:27+00:00| seen|...

CVE-2026-45776

creationtimestamp| type| source ---|---|--- 2026-06-05 21:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnl27dfxyj2r...

CVE-2026-45778

creationtimestamp| type| source ---|---|--- 2026-06-05 20:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzklr64m2g...

CVE-2026-25623

creationtimestamp| type| source ---|---|--- 2026-06-05 20:48:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkz6zg3ke27...

CVE-2026-25620

creationtimestamp| type| source ---|---|--- 2026-06-05 20:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkyyhzhmc2p...

CVE-2026-45746

creationtimestamp| type| source ---|---|--- 2026-06-05 20:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkwkeenye27 2026-06-05 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnl57vous72p 2026-06-08 12:00:19+00:00| seen|...

CVE-2025-10908

Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the intended security control that should prevent access to accounts that have been locked. This vulnerability may allow...

CVE-2025-66954

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...

CVE-2026-34883

An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily07Feb11.edr t...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-1900

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

CVE-2026-45159

Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-e...

CVE-2026-28924

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access Contacts without user consent...

CVE-2026-39823

A flaw was found in the html/template package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign = within a URL's content attribute inside a tag. This improper escaping could lead to Cross-Site Scripting XSS, allowing the attacker to...

CVE-2026-44925

Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-8139

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with vector...

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

CVE-2026-8271

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgispeed/cgidhcpdlease/cgiddns/cgisetip/cgiupnpdel/cgidhcpd/cgiupnpadd/cgiupnpedit of the file /cgi-bin/networkmgr.cgi. The manipulation leads to os command injection. The attack is possible to be carri...