CVE-2026-33052

MantisBT (MantisBT) versions 2.28.0 and 2.28.1 permit a low-privileged authenticated user with add_profile_threshold to create a global profile by tampering with the user_id in a profile-creation request, enabling an authorization bypass. The issue is fixed in version 2.28.2. Affected component: ...

KLA91062 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in...

Mozilla Firefox ESR < 115.36

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.36. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-47 advisory. - Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bug...

KLA91061 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in the Audio/Video: Web...

CVE-2025-67031

ORSEE Online Recruitment System for Economic Experiments 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem. Certain field configurations accept values beginning with the prefix "func:" which are passed directly into an eval...

CVE-2026-42822

creationtimestamp| type| source ---|---|--- 2026-05-18 19:03:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5kvcj64m2t 2026-05-19 03:00:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/116599005689905038 2026-05-19 06:00:36+00:00| seen|...

CVE-2026-45230

creationtimestamp| type| source ---|---|--- 2026-05-18 19:03:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5kv2rv5g2z 2026-06-22 00:25:16+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motmqmjm5v2f...

CVE-2026-41949

creationtimestamp| type| source ---|---|--- 2026-05-18 17:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5e4ahjr62h 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...

CVE-2026-20685

creationtimestamp| type| source ---|---|--- 2026-05-18 16:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dbepiyd2h 2026-08-10 06:52:29+00:00| seen| https://gist.github.com/HORKimhab/e7ac4ee161e8a39080c5fe6a49a833dd 2026-08-10 09:00:04+00:00| published-proof-of-concept|...

CVE-2026-40796

creationtimestamp| type| source ---|---|--- 2026-05-18 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm5cizjp7a2c...

SUSE CVE-2026-8401

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

CVE-2026-4320

creationtimestamp| type| source ---|---|--- 2026-05-18 12:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4wfejqwn2n...

CVE-2026-41119

creationtimestamp| type| source ---|---|--- 2026-05-18 12:51:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4w4g2zc52h...

CVE-2026-7304

creationtimestamp| type| source ---|---|--- 2026-05-18 12:41:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vkipbja2p 2026-05-18 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2sswfb2n 2026-05-18 17:28:06+00:00| seen|...

CVE-2026-6346

creationtimestamp| type| source ---|---|--- 2026-05-18 10:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4pj4wb2b2i 2026-05-18 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5hfq7huy2t 2026-05-21 02:37:09+00:00| seen|...

CVE-2026-1631

creationtimestamp| type| source ---|---|--- 2026-05-18 08:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4imms5k22h 2026-06-16 19:12:51+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mogixe3cpn2h...

CVE-2026-2325

creationtimestamp| type| source ---|---|--- 2026-05-18 08:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4i2k3hdm2c...

CVE-2026-3637

creationtimestamp| type| source ---|---|--- 2026-05-18 08:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hj6o32x2p...

CVE-2026-8788

creationtimestamp| type| source ---|---|--- 2026-05-18 07:23:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm4drwo3u62g 2026-05-18 08:28:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hfltxds2i...

CVE-2026-8785

creationtimestamp| type| source ---|---|--- 2026-05-18 06:37:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4b7i5vqd2h 2026-05-18 06:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm4c3nhqcd2w...