CVE-2026-45323

creationtimestamp| type| source ---|---|--- 2026-05-28 19:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwpgnynjr2c 2026-05-28 20:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwu2bimnj2p 2026-06-03 11:09:08+00:00| seen|...

CVE-2026-49127 Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be

Music Player Daemon MPD before version 0.24.11 contains a stack buffer overflow vulnerability in the pcmunpack24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM decoder plugin. Attackers can issue two MPD...

CVE-2026-45042

RustFS is a distributed object storage system in Rust. Prior to 1.0.0-beta.2, the UploadPartCopy operation could copy objects across buckets without enforcing destination bucket policy on the source, because the implementation separately validates GetObject on the source and PutObject on the dest...

CVE-2026-44543

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5qtmgk2e 2026-05-28 19:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwskzrhml2t 2026-06-08 15:37:06+00:00| seen|...

CVE-2026-6891

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://jvn.jp/en/vu/JVNVU93879027 2026-05-29 01:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxgiqyssb2k...

CVE-2026-47760

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqdulb42e 2026-05-28 17:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwiv4daft2e 2026-05-28 22:07:07+00:00| seen|...

CVE-2026-42999

creationtimestamp| type| source ---|---|--- 2026-05-28 16:08:57+00:00| seen| https://bsky.app/profile/jssfr.zombofant.net.ap.brid.gy/post/3mmwfswfjiez2 2026-05-28 16:09:26+00:00| seen| https://bsky.app/profile/jssfr.zombofant.net.ap.brid.gy/post/3mmwftqupgjt2 2026-05-28 21:13:02+00:00| seen|...

State of Post Quantum Cryptography

Discussion of PQC relevant statistics that we see across our customers and other data sources...

CVE-2026-9789

creationtimestamp| type| source ---|---|--- 2026-05-28 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116650319974507739 2026-05-28 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmv6s36qac22 2026-05-30 11:00:11+00:00| seen|...

CVE-2026-8915

creationtimestamp| type| source ---|---|--- 2026-05-28 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116649612164274667 2026-05-28 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmuuq7gg262p 2026-05-28 02:54:06+00:00| seen|...

Music Player Daemon 安全漏洞

Music Player Daemon is an open-source music playback daemon. Versions of Music Player Daemon prior to 0.24.11 contained a security vulnerability. This vulnerability stemmed from the pcmunpack24be function in src/pcm/Pack.cxx, which had a stack buffer overflow issue. This could allow unauthorized...

CVE-2026-9208

creationtimestamp| type| source ---|---|--- 2026-05-27 23:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumeouq6o26 2026-05-27 23:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunvwkxrk2p 2026-06-02 20:07:07+00:00| seen|...

CVE-2026-44713

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj257hxw2r 2026-05-27 23:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmumjuesms2q...

CVE-2026-44711

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizndlat2n 2026-05-27 23:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuo6uzrkl2i...

CVE-2026-46425

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n 2026-05-27 19:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i...

CVE-2026-48149

creationtimestamp| type| source ---|---|--- 2026-05-27 19:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n 2026-05-27 19:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n...

CVE-2026-46427

Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources/datasources.ts masks only datasource config fields whose schema type is DatasourceFieldType.PASSWORD. The Snowflake integration types its privateKey field as...

CVE-2026-49046

creationtimestamp| type| source ---|---|--- 2026-05-27 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyalfzif2e 2026-05-27 17:16:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtz3fj3rtw2...

Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...

GHSA-36FC-7WJG-MFVJ Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...