41503 matches found
CVE-2026-45223
creationtimestamp| type| source ---|---|--- 2026-05-11 20:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlm2wduquj2k 2026-05-11 20:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm4jgz6l62e...
CVE-2026-6146
creationtimestamp| type| source ---|---|--- 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 19:47:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlm23hs5hc2s 2026-05-11 21:34:10+00:00| seen|...
MantisBT has an authorization bypass in private issue monitoring
Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a private issue they do not have access to. Despite displaying an Access Denied error, the application accepts the request and creates a monitor relationship for the private...
GHSA-GGW7-9675-6V4V MantisBT has an authorization bypass in private issue monitoring
Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a private issue they do not have access to. Despite displaying an Access Denied error, the application accepts the request and creates a monitor relationship for the private...
CVE-2026-45005
creationtimestamp| type| source ---|---|--- 2026-05-11 19:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllychagb52q 2026-05-11 19:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllychagb52q...
WordPress Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Post Modification vulnerability discovered by cpforensic in WordPress Plugin Rate Star Review versions = 1.6.4...
CVE-2026-45667
creationtimestamp| type| source ---|---|--- 2026-05-11 19:07:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j 2026-05-16 00:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwlgnytx32i...
CVE-2026-45003
creationtimestamp| type| source ---|---|--- 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r 2026-05-11 19:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r...
CVE-2026-44997
creationtimestamp| type| source ---|---|--- 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r 2026-05-11 18:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx36epxz2r...
CVE-2026-45665
creationtimestamp| type| source ---|---|--- 2026-05-11 18:42:11+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-cqp4-qqvg-3787 2026-05-16 00:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmkigryb2e...
CVE-2026-4890
creationtimestamp| type| source ---|---|--- 2026-05-11 18:40:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllwemsz4v2c 2026-05-12 09:24:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhr2mtcj2s 2026-05-13 12:31:36+00:00| seen|...
CVE-2026-43639
creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhlnan72e...
CVE-2026-44413
creationtimestamp| type| source ---|---|--- 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-12 12:31:51+00:00| seen|...
CVE-2026-42858
creationtimestamp| type| source ---|---|--- 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c 2026-05-11 18:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c...
CVE-2026-43640
creationtimestamp| type| source ---|---|--- 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-16 18:07:08+00:00| seen|...
CVE-2026-38566
HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms password change at /profile, candidate deletion at /candidates/delete/, feedback submission at /feedback/add/, interview scheduling at /interviews/add are vulnerable to CSRF. An attacker who can...
CVE-2026-43434
creationtimestamp| type| source ---|---|--- 2026-05-11 18:01:23+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116557246423998157 2026-05-11 19:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllxhbfqww2n 2026-05-11 19:00:01+00:00| seen|...
CVE-2026-7210
creationtimestamp| type| source ---|---|--- 2026-05-11 17:56:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlltwjtgei2s 2026-05-11 19:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzgb52dt2n 2026-05-11 19:35:14+00:00| seen|...