CVE-2025-71341 picklescan - Remote Code Execution via Undetected profile.Profile.runctx

picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using profile.Profile.runctx in the reduce method to achieve remote code execution whe...

CVE-2025-71337 Flowise - Unverified Email Change via Account Profile Endpoint

Flowise before 3.0.10 affected versions 3.0.7 and earlier contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a login identifier and password-recovery channel, via the account profile endpoint without confirming the change to the...

CVE-2025-71337

CVE-2025-71337 affects Flowise before 3.0.10 (impacted: 3.0.7 and earlier). A authenticated user can change the account email via the account profile endpoint without confirming the change to the original email or re-entering the current password, enabling potential account takeover and abuse of ...

EUVD-2025-210304

Flowise before 3.0.10 affected versions 3.0.7 and earlier contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a login identifier and password-recovery channel, via the account profile endpoint without confirming the change to the...

CVE-2025-71337 Flowise - Unverified Email Change via Account Profile Endpoint

Flowise before 3.0.10 affected versions 3.0.7 and earlier contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a login identifier and password-recovery channel, via the account profile endpoint without confirming the change to the...

CVE-2026-8379

creationtimestamp| type| source ---|---|--- 2026-06-23 08:21:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxtmrwaw2c...

CVE-2026-48874

creationtimestamp| type| source ---|---|--- 2026-06-23 08:15:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mowxhpvugl2k...

CVE-2026-9733

creationtimestamp| type| source ---|---|--- 2026-06-23 08:04:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mowwurvmxt2r...

CVE-2026-55654

creationtimestamp| type| source ---|---|--- 2026-06-23 07:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwbexkdi2a...

CVE-2026-12866

creationtimestamp| type| source ---|---|--- 2026-06-23 06:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797893970275740 2026-06-23 06:00:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowpwxfz6z2b 2026-06-23 07:57:27+00:00| seen|...

CVE-2026-54232

creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j 2026-07-01 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x...

CVE-2026-54235

creationtimestamp| type| source ---|---|--- 2026-06-23 00:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523...

CVE-2026-48506

creationtimestamp| type| source ---|---|--- 2026-06-23 00:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5neb5pq2v 2026-07-22 14:54:29+00:00| seen| https://gist.github.com/djlan/99ee4894b545754eff357e18c53ca5f1...

CVE-2026-48166

creationtimestamp| type| source ---|---|--- 2026-06-23 00:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5eqds6w2q 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

CVE-2026-48746

creationtimestamp| type| source ---|---|--- 2026-06-23 00:20:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4wr4po422 2026-06-23 02:39:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moweoh5uiy2r 2026-06-24 02:56:13+00:00| seen|...

CVE-2026-48510

creationtimestamp| type| source ---|---|--- 2026-06-23 00:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4treusj2o...

CVE-2026-48967

creationtimestamp| type| source ---|---|--- 2026-06-23 00:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mow4p6hyif2v...

WordPress Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin <= 2.11.4 - Authenticated (Contributor+) Account Takeover vulnerability

Authenticated Contributor+ Account Takeover vulnerability discovered by tiborisaak in WordPress Plugin Ultimate Member versions = 2.11.4...

CVE-2026-44271

creationtimestamp| type| source ---|---|--- 2026-06-22 23:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzkayykd2f 2026-06-23 14:04:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moxkylwnok27 2026-07-23 01:07:06+00:00| seen|...

CVE-2026-0126

creationtimestamp| type| source ---|---|--- 2026-06-22 23:16:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movzezi5jz2s 2026-06-29 19:58:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mphbk4owkd2w 2026-07-09 13:05:02+00:00| seen|...