CVE-2019-25701

creationtimestamp| type| source ---|---|--- 2026-04-12 14:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjqmowb72w 2026-04-17 18:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjpkyapp3a2n...

CVE-2026-6126

creationtimestamp| type| source ---|---|--- 2026-04-12 12:44:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcexr3jzj22 2026-04-12 13:15:23+00:00| published-proof-of-concept| Telegram/MAArghuJr9V3EBWp3NdbOgL0SAw37FjqzKr6qVSads5vX0...

CVE-2019-25705

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries a...

CVE-2026-6123 Tenda F451 httpd addressNat fromAddressNat stack-based overflow

A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-6123

The CVE-2026-6123 entry concerns Tenda F451 1.0.0.7. Affected component: httpd, function fromAddressNat in /goform/addressNat. Root cause: manipulation of the argument entrys leads to a stack-based buffer overflow. Impact: remote code execution possible due to overflow; high confidentiality, inte...

CVE-2026-5053

creationtimestamp| type| source ---|---|--- 2026-04-11 02:29:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6s42y42p23 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w 2026-04-16 09:07:08+00:00| seen|...

CVE-2026-1502

creationtimestamp| type| source ---|---|--- 2026-04-11 02:20:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6rmgmnnj2t 2026-04-13 13:35:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjeyb3uf572r 2026-04-25 16:17:41+00:00| seen|...

libxml2:regexp: Heap-buffer-overflow in xmlFAParsePosCharGroup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4963740721414144 Project: libxml2 Fuzzing Engine: afl Fuzz Target: regexp Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x76f79f1e0d54 Crash...

EUVD-2026-21611

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. packipv6 includes the sentinel byte from packipv4 when building the packed representation of IPv4 mapped addresses like ::ffff:192.168.1.1. This produces an 18 byte value instead of...

binutils:fuzz_addr2line: Crash in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=4743829805924352 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79ec501a07db Crash State: bfdgetl32 m32relflo16reloc...

Linux Distros Unpatched Vulnerability : CVE-2026-40199

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. packipv6 includes the sentinel byte from...

CVE-2026-40198

Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exactly 8 hex groups. Inputs like "abcd", "1:2:3", or "1:2:3:4:5:6:7" are accepted and produce packed values of...

CVE-2026-40199 Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. packipv6 includes the sentinel byte from packipv4 when building the packed representation of IPv4 mapped addresses like ::ffff:192.168.1.1. This produces an 18 byte value instead of...

CVE-2026-40199

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. packipv6 includes the sentinel byte from packipv4 when building the packed representation of IPv4 mapped addresses like ::ffff:192.168.1.1. This produces an 18 byte value instead of...

CVE-2026-40198 Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exactly 8 hex groups. Inputs like "abcd", "1:2:3", or "1:2:3:4:5:6:7" are accepted and produce packed values of...

CVE-2026-40198

Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exactly 8 hex groups. Inputs like "abcd", "1:2:3", or "1:2:3:4:5:6:7" are accepted and produce packed values of...

CVE-2026-33706

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:20+00:00| seen| Telegram/ZRwkJT-g6xqpr38tjocBfuP9bsA0qHKZRvqY91xv80DRmI 2026-04-17 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjoegfxtxm2n...

CVE-2026-40242 Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...

CVE-2026-40242 Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...

Server-side Request Forgery (SSRF)

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...