CVE-2026-6375

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records PNRs without any access controls. Because PNR identifiers follow a predictable pattern, an attacker could systematically enumerate valid records and obtain associated passenger names. This flaw...

CVE-2026-42920

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42280

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-40423

When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-40458

PAC4J is vulnerable to Cross-Site Request Forgery CSRF. A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legitimate CSRF token. Importantly, the...

CVE-2026-40849

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the useralarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40618

When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition VE without Intel QuickAssist Technology QAT or on BIG-IP hardware platforms with the database variable crypto.hwacceleration set to disabled, undisclosed traffic can cause the Traffic Management Microkernel TMM to...

CVE-2026-40589

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

CVE-2026-39970

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.io profile picture upload form. The application fails to sanitize or restrict SVG/XML-based uploads and directly renders them when accessed through the domain. By uploading ...

CVE-2026-49492

creationtimestamp| type| source ---|---|--- 2026-06-05 19:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkt5gmxz42l 2026-06-05 20:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkwtctlrc2d 2026-07-12 07:00:04+00:00| published-proof-of-concept|...

CVE-2023-50360

creationtimestamp| type| source ---|---|--- 2026-06-05 18:08:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnkq7kahtd2r...

CVE-2026-3276

creationtimestamp| type| source ---|---|--- 2026-06-05 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaxtlnnt2f...

CVE-2026-50258

creationtimestamp| type| source ---|---|--- 2026-06-05 13:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkatubr7y2v 2026-06-06 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlkmlszlr2l 2026-06-06 18:17:27+00:00| seen|...

CVE-2026-50262

creationtimestamp| type| source ---|---|--- 2026-06-05 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7rc4ejp2f 2026-06-06 22:39:02+00:00| seen| https://bsky.app/profile/xlibredev.bsky.social/post/3mnnpspspy22m 2026-06-06 22:39:03+00:00| seen|...

CVE-2026-25658

creationtimestamp| type| source ---|---|--- 2026-06-05 13:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7ek56re2h...

CVE-2026-21036

creationtimestamp| type| source ---|---|--- 2026-06-05 12:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk6nsli752a...

CVE-2026-25657

creationtimestamp| type| source ---|---|--- 2026-06-05 12:52:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk6k7s6cl23...

CVE-2026-11347

creationtimestamp| type| source ---|---|--- 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k...

CVE-2026-8140

creationtimestamp| type| source ---|---|--- 2026-06-05 11:01:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyfdfui22b 2026-06-05 11:01:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyfdfui22b...

CVE-2026-38978

creationtimestamp| type| source ---|---|--- 2026-06-05 10:19:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnjvzbm7kc22 2026-06-05 10:19:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnjvzbm7kc22 2026-06-05 10:19:24+00:00| seen|...