CVE-2025-11482

creationtimestamp| type| source ---|---|--- 2026-05-26 07:33:00+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-510 2026-05-26 15:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcunez2n2n 2026-05-26 16:10:58+00:00| seen|...

Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-14915) affects IBM PowerVM Novalink.

Summary IBM WebSphere Libery Profile is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-14915 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is...

wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

A flaw was found in Wireshark. A path traversal can occur when a malformed configuration profile is imported, resulting in a denial of service or potentially in code execution...

CVE-2026-42497

creationtimestamp| type| source ---|---|--- 2026-05-26 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmq5u64eak2m 2026-05-26 08:55:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmnt47gt2b...

CVE-2026-38587

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

CVE-2026-38587

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

EUVD-2026-31838

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

CVE-2026-38587

CVE-2026-38587 is an Insecure Direct Object Reference (IDOR) impacting ONLYOFFICE DocSpace prior to 3.2.1. The flaw exists across multiple REST API endpoints and allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information such as the Owner’s ID and prof...

PT-2026-43264

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

CVE-2026-38587

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

CVE-2026-38587

An Insecure Direct Object Reference IDOR vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions User or Guest to retrieve sensitive information, such as the Owner's unique...

CVE-2021-21735

creationtimestamp| type| source ---|---|--- 2026-05-25 19:10:00+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mmp6j7lche2v 2026-05-27 00:19:21+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mmsac3s46k2g 2026-05-28 06:07:07+00:00| seen|...

CVE-2026-50912

creationtimestamp| type| source ---|---|--- 2026-05-25 19:02:56+00:00| seen| https://bsky.app/profile/newstecnicas.com/post/3mmp653pusk2w...

CVE-2026-39831

creationtimestamp| type| source ---|---|--- 2026-05-25 18:09:02+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34s6rls2e 2026-05-25 18:09:03+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34ybi2s2e 2026-05-25 18:09:03+00:00| seen|...

CVE-2026-42046

creationtimestamp| type| source ---|---|--- 2026-05-25 13:40:12+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmom4bm7c32p...

CVE-2026-9410

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

CVE-2026-9417

A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public an...

CVE-2026-9410 Sushmi-pal Invoice-System Profile Workflow profile improper authorization

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

CVE-2026-9410

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

EUVD-2026-31612

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...