@euvd-bot.bsky.social🚨 EUVD-2026-100518 📊 9.3/10 🏢 Adobe 📝 ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100518 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100519 📊 9.1/10 🏢 Adobe 📝 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100519 #cybersecurity #infosec #cve #euvd
@stackflag.bsky.socialCVE-2026-55562 - cronicle
In Cronicle versions before 0.9.119, a user's full name is shown in the admin activity log without proper cleaning. An attacker who can set their own name (or register a free…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-55695 - fearlesscms
In versions up to 0.1.2b, a logged‑in admin can enter any Git repository address for updates. The system blindly clones that repository and overwrites core folders,…
Too many irrelevant or confusing CVEs? Use stackflag.com
@trending.getskyscraper.comHere are the #Top10 trending hashtags on #Bluesky the past hour:
#news #art #nowplaying #geckos #ai #infosec #cybersecurity #cve #ucl #portfolioday
Powered by https://getskyscraper.com
@stackflag.bsky.socialCVE-2026-103928 - metabase
Versions of Metabase from 1.55.0 up to 1.61.4 allow users who can run native queries to use built-in H2 functions to access any file on the server or connect other databases. The risk is…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2024-34323
The 2022.2403.3.101 version of ProPhoenix Law RMS does not properly verify who is requesting information, so someone could send a specially crafted web request and see private data belonging to other users.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@vulnsea.com🌊 ABYSSAL · critical with a public exploit
CVE-2026-104935: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitra…
CVSS 8.6 · CISA KEV · 0day
https://beta.vulnsea.com/cve/CVE-2026-104935
@stackflag.bsky.socialCVE-2026-69227 - portal for arcgis
Portal for ArcGIS can be accessed without a login to some internal admin pages when certain conditions are met. This could let an attacker view or change settings that should be…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-55675 - docs
The documentation build process for the Salty website runs code from external contributors before installing required packages. If a malicious contributor adds specially crafted setup…
Too many irrelevant or confusing CVEs? Use stackflag.com
@euvd-bot.bsky.social🚨 EUVD-2026-100401 📊 7.8/10 🏢 Microsoft 📝 Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100401 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100402 📊 5.9/10 🏢 Microsoft 📝 A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully ex... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100402 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100403 📊 7.4/10 🏢 Microsoft 📝 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100403 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100404 📊 9.8/10 🏢 Microsoft 📝 Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100404 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100405 📊 7.8/10 🏢 Microsoft 📝 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100405 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100406 📊 7.8/10 🏢 Microsoft 📝 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100406 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100407 📊 9.8/10 🏢 Microsoft 📝 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100407 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100408 📊 7.8/10 🏢 Microsoft 📝 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100408 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100409 📊 7.8/10 🏢 Microsoft 📝 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100409 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-100410 📊 7.0/10 🏢 Microsoft 📝 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100410 #cybersecurity #infosec #cve #euvd