{"vulnerability": "cve-2026-10810", "sightings": [{"uuid": "1fbc7358-910c-455b-84af-31b6139e757b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhwd46ag22x", "content": "CVE-2026-10810 - itsourcecode Fees Management System navbar.php cross site scripting\nCVE ID : CVE-2026-10810\n \n Published : June 4, 2026, 2:16 p.m. | 16\u00a0minutes ago\n \n Description : A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an...", "creation_timestamp": "2026-06-04T15:19:31.722092Z"}, {"uuid": "29fcc232-85e4-4f11-98dd-694bd8837675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108108", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxhcxeb5s526", "content": "PHPNuxBill through 2025.3.20 carries CVE-2026-108108 (CVSS 7.1).\nAttackers with a known username can bypass CHAP auth on MikroTik hotspots or PPPoE with any wrong password.\n\nhttps://thecircuitry.to/article/phpnuxbill-through-2025320-hit-by-cve-2026-108108-auth-bypass-mv14xwao", "creation_timestamp": "2026-10-09T15:44:52.970060Z"}, {"uuid": "c22c5360-cdbc-4f8d-a395-ee5112e89f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108107", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxhebgylwc2l", "content": "\ud83d\udea8 CVE-2026-108107 \u2014 CVSS 9.3 CRITICAL\n\nPHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php Free...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108107\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T16:08:24.764799Z"}, {"uuid": "09873ec8-7e28-4518-ab03-b401a233c083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108109", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxhebp6l7t2q", "content": "\ud83d\udea8 CVE-2026-108109 \u2014 CVSS 9.3 CRITICAL\n\nPHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108109\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T16:08:33.437529Z"}, {"uuid": "7bc5edb7-a579-4e73-b92f-df1e18923541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi2jgr44h2s", "content": "\ud83d\udd34 CVE-2026-108109 - Critical (9.1)\n\nPHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T22:46:35.973484Z"}, {"uuid": "b0b32e52-1b82-4a98-a79d-7737ecba7372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi2jn2uz42b", "content": "\ud83d\udfe0 CVE-2026-108106 - High (7.5)\n\nXerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that all...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T22:46:42.317671Z"}, {"uuid": "0309ea43-ac17-47e8-a899-4d0f33c66f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108107", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi2jtcx7p2r", "content": "\ud83d\udd34 CVE-2026-108107 - Critical (9.8)\n\nPHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radiu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T22:46:48.885420Z"}, {"uuid": "46bde708-03a5-4fda-b160-447108abe950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi3dlite72s", "content": "\ud83d\udfe0 CVE-2026-108101 - High (7.5)\n\nHortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in Plant...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T23:01:13.888452Z"}, {"uuid": "ebc26220-2f0a-4be3-be35-f4d2f7df02f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108109", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi5j4fhhy22", "content": "CVE-2026-108109 - phpnuxbill\nThe PHPNuxBill billing system lets anyone try unlimited 6-digit codes when a customer resets their password. Because there is no limit on attempts, an attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpnuxbill #hotspotbilling #CVE #infosec", "creation_timestamp": "2026-10-09T23:40:05.703528Z"}, {"uuid": "c2327f54-83b6-4cc0-8d1d-4f84622eb77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108107", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi62z2mgx24", "content": "CVE-2026-108107 - phpnuxbill\nThe PHPNuxBill billing system (up to version 2025.3.20) has a flaw in its radius.php file that lets anyone send specially crafted requests and run hidden database\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpnuxbill #hotspotbilling #CVE #infosec", "creation_timestamp": "2026-10-09T23:50:06.153506Z"}, {"uuid": "98075f77-7125-470f-b557-8b6c0bfe344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlujsy5f62l", "content": "CVE-2026-108101\nIn HortusFox versions up to 6.3, users who are signed in can place any type of file in the public attachments folder. This means an attacker could upload web pages or server scripts that run unwanted code when\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-11T11:10:04.860707Z"}]}