CVE-2026-4387

creationtimestamp| type| source ---|---|--- 2026-05-29 22:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkxilymg25 2026-06-01 17:07:54+00:00| seen| https://bsky.app/profile/1cemoon.bsky.social/post/3mnakxoqqss2v 2026-06-01 17:48:52+00:00| seen|...

CVE-2026-45352

creationtimestamp| type| source ---|---|--- 2026-05-29 22:13:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkojscxo24...

CVE-2026-47266

creationtimestamp| type| source ---|---|--- 2026-05-29 22:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzkfldrxk25...

GHSA-X628-457G-2PW9 Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

Summary modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls File::moveToFolder$destFolderUUID. File::moveToFolder checks the upload...

Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

Summary modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls File::moveToFolder$destFolderUUID. File::moveToFolder checks the upload...

CVE-2026-48811

creationtimestamp| type| source ---|---|--- 2026-05-29 22:04:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzk5vpbtf27...

CVE-2026-44422

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwzys5f23 2026-05-30 12:02:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663420594857571...

CVE-2026-48810

creationtimestamp| type| source ---|---|--- 2026-05-29 21:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjls6xuq2q...

CVE-2026-45700

creationtimestamp| type| source ---|---|--- 2026-05-29 21:51:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjgvrvso2x 2026-06-12 19:20:51+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hjyl4kl2d 2026-06-12 19:24:17+00:00| seen|...

CVE-2026-46385

creationtimestamp| type| source ---|---|--- 2026-05-29 21:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjcgcjw427...

CVE-2026-45151

creationtimestamp| type| source ---|---|--- 2026-05-29 21:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzj2gvkuo2d...

CVE-2026-45294

creationtimestamp| type| source ---|---|--- 2026-05-29 21:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmziqa62nu2m...

CVE-2026-46527

creationtimestamp| type| source ---|---|--- 2026-05-29 21:34:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzihovmfd2m...

GHSA-35JP-WW65-95WH

creationtimestamp| type| source ---|---|--- 2026-05-29 21:20:01+00:00| seen| https://gist.github.com/konard/e2cdc40115fd7e81d8828ab9496865a2 2026-06-03 14:43:57+00:00| seen| https://t.me/bdufstecru/3216 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205da...

CVE-2026-45628

creationtimestamp| type| source ---|---|--- 2026-05-29 21:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgr7rw7j2d 2026-05-30 16:02:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3gevmjrn2w...

CVE-2026-44420

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgnhigoh2v 2026-05-30 13:56:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663869287019686...

CVE-2026-45668

creationtimestamp| type| source ---|---|--- 2026-05-29 20:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgibblfi2g...

CVE-2026-45631

creationtimestamp| type| source ---|---|--- 2026-05-29 20:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzg7ct3rx27 2026-05-30 03:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn22pkuqxu2r...

CVE-2026-45632

creationtimestamp| type| source ---|---|--- 2026-05-29 20:43:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzfnfqmcj2s 2026-05-30 04:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn262lpag62r...

CVE-2026-45629

creationtimestamp| type| source ---|---|--- 2026-05-29 20:30:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzew26v5d2h 2026-05-30 17:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jp7itoj25...