CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions

GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected...

CVE-2026-9723

creationtimestamp| type| source ---|---|--- 2026-06-02 09:16:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncb3flh4q2c 2026-06-03 06:15:27+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnehhd4hyu2t...

CVE-2026-4080

creationtimestamp| type| source ---|---|--- 2026-06-02 09:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncasrblmr25...

CVE-2026-10568

creationtimestamp| type| source ---|---|--- 2026-06-02 05:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbturbbnw2v...

CVE-2026-10548

creationtimestamp| type| source ---|---|--- 2026-06-02 05:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbt5gaofz22...

CVE-2026-3198

creationtimestamp| type| source ---|---|--- 2026-06-02 04:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbs4zpp6f2f...

CVE-2026-10114

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handlescpinfo in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been...

CVE-2026-34907

creationtimestamp| type| source ---|---|--- 2026-06-02 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-34906 2026-06-02 13:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnconxngwd2f...

CVE-2026-28511

creationtimestamp| type| source ---|---|--- 2026-06-02 01:36:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbhf6duse25...

CVE-2026-10514

creationtimestamp| type| source ---|---|--- 2026-06-02 01:16:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbgbdnijw2z...

CVE-2026-24752

creationtimestamp| type| source ---|---|--- 2026-06-02 01:04:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnbfiigx7k2q...

CVE-2026-40965

creationtimestamp| type| source ---|---|--- 2026-06-02 00:10:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbcme5lcc2s 2026-06-24 21:16:11+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mp2tlbjjbs2z...

PT-2026-45803

NamelessMC is website software for Minecraft servers. In version 2.2.4, core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. This means that authenticated low-privileged users can add reactions to private...

PT-2026-45802

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

PT-2026-45801

NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page modules/Core/pages/profile.php processes wall post submissions and replies before verifying whether the viewer is authorized to access the profile. This allows any user with the profile.post permission to wri...

CVE-2026-10293

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-10113

A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit ha...

CVE-2026-49136

creationtimestamp| type| source ---|---|--- 2026-06-01 22:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnb3cknu7j2r...

CVE-2026-10293 UTT HiPER 1200GW formFireWall strcpy stack-based overflow

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be...