#vulnerability — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #vulnerability, aggregated by home.social.
-
🚨 EUVD-2026-33030
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization ch...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33030
-
🚨 EUVD-2026-33031
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a speci...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33031
-
🚨 EUVD-2026-33032
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kib...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33032
-
🚨 EUVD-2026-33033
📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent policy configuration by injecting values into ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33033
-
🚨 EUVD-2026-33034
📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections manag...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33034
-
🚨 EUVD-2026-33035
📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28📝 Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress control...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33035
-
🚨 EUVD-2026-33036
📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services (+2 more)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33036
-
🚨 EUVD-2026-33037
📊 Score: 7.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33037
-
🚨 EUVD-2026-33038
📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33038
-
🚨 EUVD-2026-33039
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33039
-
🚨 EUVD-2026-33040
📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33040
-
🚨 EUVD-2026-33041
📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with netwo...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33041
-
🚨 EUVD-2026-33042
📊 Score: 9.1/10 (CVSS v3.1)
📦 Product: Oracle Internet Procurement Connector
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33042
-
🚨 EUVD-2026-33043
📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33043
-
🚨 EUVD-2026-33044
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33044
-
🚨 EUVD-2026-33045
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle iAssets
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33045
-
🚨 EUVD-2026-33046
📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Public Sector Financials (International)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitabl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33046
-
🚨 EUVD-2026-33047
📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle Universal Work Queue
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33047
-
🚨 EUVD-2026-33048
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33048
-
🚨 EUVD-2026-33049
📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33049
-
🚨 EUVD-2026-33050
📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33050
-
🚨 EUVD-2026-33051
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33051
-
🚨 EUVD-2026-33052
📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33052
-
🚨 EUVD-2026-33013
📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compro...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33013
-
🚨 EUVD-2026-33015
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33015
-
🚨 EUVD-2026-33014
📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33014
-
🟠 CVE-2026-45047 - High (7.5)
bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecoder(r.Body).Decode(&request) without restricting the maximum read si...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45047/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.96/10 (Medium)
📈 Vulnerabilities: 397
⬇️ Min: 2.7 | ⬆️ Max: 10.0📅 Date: 2026-05-27
-
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
Read on HackerWorkspace: https://hackerworkspace.com/article/vaultjacking-one-captured-pin-the-entire-google-password-manager-vault
-
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
Read on HackerWorkspace: https://hackerworkspace.com/article/vaultjacking-one-captured-pin-the-entire-google-password-manager-vault
-
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
Read on HackerWorkspace: https://hackerworkspace.com/article/vaultjacking-one-captured-pin-the-entire-google-password-manager-vault
-
Vaultjacking: One Captured PIN, the Entire Google Password Manager Vault
Read on HackerWorkspace: https://hackerworkspace.com/article/vaultjacking-one-captured-pin-the-entire-google-password-manager-vault
-
Apparently, you can be IDed by what your SSD does
Websites have a new way to spy on visitors: analyzing their SSD activity
#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech
-
Apparently, you can be IDed by what your SSD does
Websites have a new way to spy on visitors: analyzing their SSD activity
#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech
-
Apparently, you can be IDed by what your SSD does
Websites have a new way to spy on visitors: analyzing their SSD activity
#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech
-
Apparently, you can be IDed by what your SSD does
Websites have a new way to spy on visitors: analyzing their SSD activity
#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech
-
Apparently, you can be IDed by what your SSD does
Websites have a new way to spy on visitors: analyzing their SSD activity
#Websites #Spyware #SSD #Hardware #Storage #Privacy #Vulnerability #Security #Surveillance #Tech
-
AI-Assisted Exploit Development Outpaces Detection
https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
Read on HackerWorkspace: https://hackerworkspace.com/article/ai-assisted-exploit-development-outpaces-detection
-
AI-Assisted Exploit Development Outpaces Detection
https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
Read on HackerWorkspace: https://hackerworkspace.com/article/ai-assisted-exploit-development-outpaces-detection
-
AI-Assisted Exploit Development Outpaces Detection
https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
Read on HackerWorkspace: https://hackerworkspace.com/article/ai-assisted-exploit-development-outpaces-detection
-
AI-Assisted Exploit Development Outpaces Detection
https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
Read on HackerWorkspace: https://hackerworkspace.com/article/ai-assisted-exploit-development-outpaces-detection
-
📊 EUVD Daily CVSS Summary
🟡 Average Score: 6.74/10 (Medium)
📈 Vulnerabilities: 286
⬇️ Min: 1.8 | ⬆️ Max: 10.0📅 Date: 2026-05-26
-
🟠 CVE-2026-42735 - High (8.2)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🟠 CVE-2026-42735 - High (8.2)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🟠 CVE-2026-42735 - High (8.2)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-42755 - Critical (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-42755 - Critical (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-42755 - Critical (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-42748 - Critical (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42748/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-42748 - Critical (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42748/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack