PT-2026-45535

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions 32.0.0 through 32.0.8 Nextcloud Server versions 33.0.0 through 33.0.2 Nextcloud Enterprise Server versions prior to 29.0.16.16 Nextcloud Enterprise Server versions prior to 30.0.17.9 Nextcloud Enterprise Server versio...

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

PT-2026-45672

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...

Nextcloud Server 授权问题漏洞

NextCloud Server is an open-source NextCloud server program. Versions of NextCloud Server from 32.0.0 to 32.0.9 and from 33.0.0 to 33.0.3 had authorization-related vulnerabilities. These vulnerabilities stemmed from authentication bypasses, allowing attackers who know the user’s password to...

PT-2026-45534

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions 32.0.0 through 32.0.8 Nextcloud Server versions 33.0.0 through 33.0.2 Nextcloud Enterprise Server affected versions not specified Description An authentication bypass allows attackers who possess a user's password to...

Ubuntu 25.10 / 26.04 LTS : CRaC JDK 25 vulnerabilities (USN-8334-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8334-1 advisory. Thomas Beckers discovered that the JAXP component of CRaC JDK 25 did not correctly authenticate certain APIs. A remote unauthenticated attacker...

CVE-2022-42005

creationtimestamp| type| source ---|---|--- 2026-05-31 19:00:11+00:00| seen| Telegram/ZoY6dRqoyhlR4mBfSRB4aFzKbPGG5Dw602ZRl8-Iopy1ppw 2026-05-31 21:00:04+00:00| seen| Telegram/UOEqxw8X8FBF5SdoLVIwOK-ODKVahezuJQZvJqlgU47R468...

[SECURITY] [DSA 6315-1] cyborg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6315-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq -...

CVE-2026-10181

creationtimestamp| type| source ---|---|--- 2026-05-31 16:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5z7lyo5i2g 2026-05-31 17:02:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn627aozji23...

CVE-2026-10179

creationtimestamp| type| source ---|---|--- 2026-05-31 13:23:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5nyomfww2f 2026-05-31 13:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5obdkwxa2m 2026-05-31 17:02:28+00:00| seen|...

CVE-2026-10178

creationtimestamp| type| source ---|---|--- 2026-05-31 13:22:48+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn5nwpozo52a 2026-05-31 13:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn5nyes2y22p...

CVE-2026-10173 Orthanc Explorer 2 URL StudyList.vue cross site scripting

A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue of the component URL Handler. This manipulation of the argument remote-source causes cross site scripting. It is possible to...

CVE-2026-10163

creationtimestamp| type| source ---|---|--- 2026-05-31 04:43:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4qwxgvec2y 2026-05-31 05:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4rv5fxqw2r 2026-05-31 07:30:29+00:00| seen|...

GHSA-X746-7M8F-X49C

creationtimestamp| type| source ---|---|--- 2026-05-31 03:41:45+00:00| seen| https://gist.github.com/ftnext/833b2536b55601402ace7b2a4b8cd024 2026-05-31 03:42:36+00:00| seen| https://gist.github.com/ftnext/f3a40adeae641644a9cbad660d0234cb...

Open5GS 授权问题漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for Lte/Nr networks. Versions of Open5GS 2.7.6 and earlier contained vulnerabilities related to authorization. These vulnerabilities were caused by an unknown function in the file...

A New Framework for Cybersecurity Refusals in AI Agents

Agentic scaffolds have dramatically improved LLM performance on complex, long-horizon tasks, yielding both broad benefits and amplified risks in domains like cybersecurity. Existing benchmarks for AI agents in cybersecurity focus mainly on measuring proficiency--how effectively agents can complet...

CVE-2026-10125

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joxxx5e2m 2026-05-30 17:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3m2li2nr2n...

CVE-2026-10124

creationtimestamp| type| source ---|---|--- 2026-05-30 17:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3joqscdv2p 2026-05-30 17:24:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3kxusz622n...

CVE-2026-10123

creationtimestamp| type| source ---|---|--- 2026-05-30 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jnjsfjr26 2026-05-30 17:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3ld7z7nr2a...

CVE-2026-10121

creationtimestamp| type| source ---|---|--- 2026-05-30 17:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3jn3k2yj26 2026-05-30 18:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3n6fjhzf2u...