41327 matches found
CVE-2026-43492
creationtimestamp| type| source ---|---|--- 2026-05-19 12:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7fua4css2n 2026-07-06 05:55:36+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...
CVE-2026-42649
creationtimestamp| type| source ---|---|--- 2026-05-19 09:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm73h6o3dx2i...
CVE-2026-8813
creationtimestamp| type| source ---|---|--- 2026-05-19 09:26:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm73576ws62q 2026-05-31 11:01:45+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g2iuqbj2z...
CVE-2026-8830
creationtimestamp| type| source ---|---|--- 2026-05-19 09:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm72uar7nj2v...
CVE-2026-47309
creationtimestamp| type| source ---|---|--- 2026-05-19 09:16:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm72lcczzl2o...
EternalBlue
EternalBlue MS17-010 Exploitation Lab A professional, end-t...
BIT-MONGODB-2026-8336 Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands
After invoking $internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine through $where, $function, mapreduce reduce stage, etc. is used also in...
BIT-MONGODB-2026-8202 Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts MongoDB Server v7.0 versions prior to...
CVE-2026-42099
creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...
CVE-2026-42098
creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...
CVE-2026-42100
creationtimestamp| type| source ---|---|--- 2026-05-19 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-42096 2026-05-21 01:49:33+00:00| seen| https://ccb.belgium.be/advisories/warning-actively-exploited-critical-and-multiple-high-vulnerabilities-sparx-pro-cloud...
CVE-2026-8776
A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow. It is possible to launch the attack...
CtrlPanel.gg 访问控制错误漏洞
CtrlPanel.gg is an open-source host service billing management tool developed by CtrlPanel.gg. Versions of CtrlPanel.gg 1.1.1 and earlier contained a security vulnerability related to access control. This vulnerability arose from multiple administrator controllers performing permission checks on...
Sparx Systems Sparx Pro Cloud Server 安全漏洞
Sparx Pro Cloud Server is a modeling and service platform developed by Sparx Systems in Australia. It supports remote access to model repositories and collaborative management. Versions of Sparx Pro Cloud Server 6.1 and earlier contained security vulnerabilities. These vulnerabilities stemmed fro...
CVE-2026-39250
CVE-2026-39250 affects Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, enabling potentially dangerous operations. The NVD entry cites a CVSSv3.1 base score of 7.3 (HIGH) with network vector, low confidentiality/integrity/availabilit...
CVE-2026-39250
An authorization vulnerability exists in Innoshop 0.6.0. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations...
terrascan 代码问题漏洞
Trenescan is an open-source infrastructure code static security analysis tool developed by Tenable. Versions of Trenescan 1.18.3 and earlier contained code vulnerabilities. These vulnerabilities stemmed from a server-side request forgeing vulnerability in the webhookurl parameter of the file...
How Storm-2949 turned a compromised identity into a cloud-wide breach
In this article 1. Attack chain overview 1. Cloud compromise: Microsoft Entra ID and Microsoft 365 2. Initial access and persistence through targeted social engineering and SSPR abuse 3. Directory discovery and persistence 4. Microsoft 365 discovery and exfiltration 5. Cloud compromise: Microsoft...
CVE-2026-45243 Summarize < 0.15.1 Browser Extension Missing Authorization via Content Script
Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operations on automation artifacts. Attackers can simulate runtime messages with spoofed sender identifiers to list, read,...