CVE-2026-11416

creationtimestamp| type| source ---|---|--- 2026-06-05 22:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlajcy3g72l 2026-06-05 22:59:58+00:00| seen| https://bsky.app/profile/potato.software/post/3mnlajecvof2j 2026-06-05 23:30:45+00:00| seen|...

CVE-2026-36748

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting XSS via Social Media links in user profile...

CVE-2026-25624

CVE-2026-25624 is an administrative cross-site scripting vulnerability in the web UI dashboard layout of Arista Edge Threat Management NGFW. The issue involves unvalidated user-supplied variables echoed back to administrative profiles, enabling XSS when an attacker has administrative UI access. A...

EUVD-2026-34911

An administrative cross-site scripting XSS vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall NGFW. Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processin...

CVE-2026-25624 Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting

An administrative cross-site scripting XSS vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall NGFW. Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processin...

CVE-2026-20219

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

CVE-2026-4608

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2026-40314

NamelessMC is website software for Minecraft servers. In version 2.2.4,core/classes/Misc/ProfilePostReactionContext.php only verifies that the wall post exists and does not enforce blocked/private-profile visibility. modules/Core/queries/reactions.php allows unauthenticated GET requests for...

CVE-2026-40629

When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-58343

Vision Helpdesk before 5.7.0 patched in 5.6.10 allows attackers to read user profiles via modified serialized cookie data to visclientid...

CVE-2026-49777

creationtimestamp| type| source ---|---|--- 2026-06-05 10:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuxxgeko2l 2026-06-05 10:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuxxgeko2l 2026-06-05 11:25:00+00:00| seen|...

CVE-2026-48907 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

CVE-2026-48907

CVE-2026-48907 — Joomla JCE extension unauthenticated RCE is a vulnerability in the Joomla Content Editor (JCE) that allows unauthenticated users to create editor profiles and upload PHP payloads, enabling remote code execution. Technical details across documents show an unrestricted file upload ...

CVE-2026-11147

creationtimestamp| type| source ---|---|--- 2026-06-05 07:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjkx645qb2r 2026-06-05 13:24:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11164

creationtimestamp| type| source ---|---|--- 2026-06-05 07:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjkwp766r2n 2026-06-05 13:24:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11262

creationtimestamp| type| source ---|---|--- 2026-06-05 04:29:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116695615039571880 2026-06-05 05:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnje72exif26 2026-06-05 13:24:36+00:00| seen|...

CVE-2026-11298

creationtimestamp| type| source ---|---|--- 2026-06-05 03:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj6spgd4r2k 2026-06-05 13:24:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11305

creationtimestamp| type| source ---|---|--- 2026-06-05 03:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnj5jg5xpe2p 2026-06-05 03:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj72gcdjl25 2026-06-05 13:24:44+00:00| seen|...

PT-2026-47049

Name of the Vulnerable Software and Affected Versions Arista Edge Threat Management - Arista Next Generation Firewall NGFW affected versions not specified Description An administrative cross-site scripting XSS issue exists in the web user interface dashboard layout. Unvalidated user-supplied...