CVE-2026-9039

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzw4g35425 2026-07-24 14:24:47+00:00| seen|...

CVE-2026-7786

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-02 2026-05-28 20:10:30+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mmwtcxdrvt2n 2026-05-29 15:59:16+00:00| seen|...

CVE-2026-9037

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 21:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxl2au522n...

CVE-2026-9803 Keycloak: keycloak: denial of service via malformed authorization header

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

SUSE CVE-2026-45856

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend ibuverbspostsend uses cmd.wqesize from userspace without any validation before passing it to kmalloc and using the allocated buffer as struct ibuverbssendwr. If a...

CVE-2026-45102

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuamewz2r...

[SECURITY] Fedora 44 Update: nginx-1.30.2-1.fc44

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

CVE-2026-44729

creationtimestamp| type| source ---|---|--- 2026-05-28 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuq35vhat2w...

CVE-2026-44930

creationtimestamp| type| source ---|---|--- 2026-05-28 00:02:18+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmupsheol22m 2026-05-29 13:10:09+00:00| seen| https://t.me/bdufstecru/3204 2026-06-20 21:07:08+00:00| seen|...

CVE-2026-8362

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupr5ugvq2w 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

PT-2026-44378

The Mennekes Amtron series firmware versions ≤ 5.22.3 is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin operator and manufacturer accounts via crafted POST requests...

WordPress plugin Timetable and Event Schedule by MotoPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system developed by Thorsten Rinne. Versions of phpMyFAQ prior to 4.1.3 contained security vulnerabilities. These vulnerabilities stemmed from the default empty value of api.apiClientToken in API v4.0, which allowed unverified users to create...

PT-2026-44188

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

AnythingLLM 后置链接漏洞

AnythingLLM is an integrated AI application developed by Mintplex. Versions of AnythingLLM prior to 1.13.0 contained a post-link vulnerability. This vulnerability stemmed from the file system replication tool only verifying the top-level source and target paths. The recursive replication assistan...

WordPress plugin Advanced Custom Fields: Extended 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2026-8360

creationtimestamp| type| source ---|---|--- 2026-05-27 23:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgrpokt2e 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-8364

creationtimestamp| type| source ---|---|--- 2026-05-27 23:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgdfycu2z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-46416

creationtimestamp| type| source ---|---|--- 2026-05-27 22:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulrwi3e22p...

CVE-2026-8363

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj45tjn52z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...