CVE-2026-40458

PAC4J is vulnerable to Cross-Site Request Forgery CSRF. A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legitimate CSRF token. Importantly, the...

CVE-2026-40849

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the useralarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40618

When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition VE without Intel QuickAssist Technology QAT or on BIG-IP hardware platforms with the database variable crypto.hwacceleration set to disabled, undisclosed traffic can cause the Traffic Management Microkernel TMM to...

CVE-2026-40589

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

CVE-2026-39970

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture upload form. The application fails to sanitize or restrict SVG/XML-based uploads and directly renders them when accessed through the domain. By uploading ...

CVE-2026-49492

creationtimestamp| type| source ---|---|--- 2026-06-05 19:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkt5gmxz42l 2026-06-05 20:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkwtctlrc2d 2026-07-12 07:00:04+00:00| published-proof-of-concept|...

CVE-2023-50360

creationtimestamp| type| source ---|---|--- 2026-06-05 18:08:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnkq7kahtd2r...

CVE-2026-3276

creationtimestamp| type| source ---|---|--- 2026-06-05 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaxtlnnt2f...

CVE-2026-50258

creationtimestamp| type| source ---|---|--- 2026-06-05 13:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkatubr7y2v 2026-06-06 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlkmlszlr2l 2026-06-06 18:17:27+00:00| seen|...

CVE-2026-50262

creationtimestamp| type| source ---|---|--- 2026-06-05 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7rc4ejp2f 2026-06-06 22:39:02+00:00| seen| https://bsky.app/profile/xlibredev.bsky.social/post/3mnnpspspy22m 2026-06-06 22:39:03+00:00| seen|...

CVE-2026-25658

creationtimestamp| type| source ---|---|--- 2026-06-05 13:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7ek56re2h...

CVE-2026-21036

creationtimestamp| type| source ---|---|--- 2026-06-05 12:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk6nsli752a...

CVE-2026-25657

creationtimestamp| type| source ---|---|--- 2026-06-05 12:52:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk6k7s6cl23...

CVE-2026-11347

creationtimestamp| type| source ---|---|--- 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k...

CVE-2026-8140

creationtimestamp| type| source ---|---|--- 2026-06-05 11:01:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyfdfui22b 2026-06-05 11:01:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyfdfui22b...

CVE-2026-38978

creationtimestamp| type| source ---|---|--- 2026-06-05 10:19:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnjvzbm7kc22 2026-06-05 10:19:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnjvzbm7kc22 2026-06-05 10:19:24+00:00| seen|...

CVE-2016-8863

creationtimestamp| type| source ---|---|--- 2026-06-05 10:19:08+00:00| seen| https://bsky.app/profile/midnaw.tobskep.com/post/3mnjvyseacs2t 2026-06-05 10:19:08+00:00| seen| https://bsky.app/profile/midnaw.tobskep.com/post/3mnjvyseacs2t...

CVE-2026-42795

creationtimestamp| type| source ---|---|--- 2026-06-05 09:52:49+00:00| seen| https://bsky.app/profile/janvhs.com/post/3mnjujssgpk2p 2026-06-05 10:19:37+00:00| seen| https://bsky.app/profile/janvhs.com/post/3mnjvzqchfk2a...

CVE-2026-43965

creationtimestamp| type| source ---|---|--- 2026-06-05 09:52:49+00:00| seen| https://bsky.app/profile/janvhs.com/post/3mnjujssgpk2p 2026-06-05 10:19:37+00:00| seen| https://bsky.app/profile/janvhs.com/post/3mnjvzqchfk2a 2026-06-05 10:19:37+00:00| seen|...

CVE-2026-8914

CVE-2026-8914 affects Teltonika Networks RUTOS devices (versions 7.22–7.23.2) and TSWOS devices (1.09–1.09.1). The root cause is unsafe calls to an eval function in rpc-profile, allowing a lower-privileged user to perform command injection as root. CVSS details in the provided data indicate local...