CVE-2026-40780

creationtimestamp| type| source ---|---|--- 2026-06-02 20:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndf43bdsq25...

CVE-2026-5078

creationtimestamp| type| source ---|---|--- 2026-06-02 19:47:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mndedxkb3s2m 2026-06-03 10:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnew7lag7b2u 2026-07-10 15:11:59+00:00| seen|...

CVE-2026-40715

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6f4rnyv2r...

CVE-2026-10608 DedeCMS carbuyaction.php RemoveXSS sql injection

A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used f...

CVE-2026-40571 NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization

NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...

CVE-2026-40571

NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...

CVE-2026-35447

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-35447 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-35716

A stack-based buffer overflow in the motionprivacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1 parameter in a POST request to the /cgi-bin/admin/setpm.cgi, /cgi-bin/admin/setmd.cgi, or...

CVE-2026-33398

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

CVE-2026-30650

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device...

CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

CVE-2026-33398

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

EUVD-2026-33949

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/getquotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

CVE-2026-39551

creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncq57sabd27 2026-06-03 06:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmrltjg2h...

CVE-2026-9309

creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4gxck323 2026-06-03 04:52:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-6...

CVE-2026-9308

creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4gxck323 2026-06-03 04:52:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-6...

CVE-2026-42669

creationtimestamp| type| source ---|---|--- 2026-06-02 13:40:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncpubck3f2j 2026-06-03 06:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmyy74h2f...

CVE-2025-58705

creationtimestamp| type| source ---|---|--- 2026-06-02 13:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncoillocc2j 2026-06-04 08:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh5tqcloi2p...

CVE-2026-1451

creationtimestamp| type| source ---|---|--- 2026-06-02 09:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncd5uzkw32d 2026-06-03 16:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnfixlzgle24...