CVE-2026-20152

creationtimestamp| type| source ---|---|--- 2026-04-15 19:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o 2026-04-16 17:19:57+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116415528739254723 2026-04-16 18:00:00+00:00| seen|...

CVE-2026-6317

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkt5v4i6i2r 2026-04-15 23:27:00+00:00|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.54-1.hum1 noarch tomcat10-admin-webapps-10.1.54-1.hum1 noarch tomcat10-common-10.1.54-1.hum1 noarch tomcat10-docs-webapp-10.1.54-1.hum1 noarch...

bind9.18 security update

An update is available for bind9.18. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Na...

CVE-2026-41180

creationtimestamp| type| source ---|---|--- 2026-04-15 08:28:18+00:00| published-proof-of-concept| https://github.com/psi-4ward/psitransfer/security/advisories/GHSA-533q-w4g6-5586 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng 2026-04-23 05:23:51+00:00|...

BELL-CVE-2026-39979

Bulletin has no description...

Towards Personalizing Secure Programming Education with LLM-Injected Vulnerabilities

According to constructivist theory, students learn software security more effectively when examples are grounded in their own code. Generic examples often fail to connect with students' prior work, limiting engagement and understanding. Advances in LLMs are now making it possible to automatically...

VeriCWEty: Embedding Enabled Line-Level CWE Detection in Verilog

Large Language Models LLMs have shown significant improvement in RTL code generation. Despite the advances, the generated code is often riddled with common vulnerabilities and weaknesses CWEs that can slip by untrained eyes. Attackers can often exploit these weaknesses to fulfill their nefarious...

Server-side Request Forgery (SSRF)

Overview Jellyfin.Common is an a Free Software Media System that puts you in control of managing and streaming your media. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the POST /LiveTv/TunerHosts endpoint when the tuner URL is not properly validated. An...

EUVD-2026-22493

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-209459

An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6...

CVE-2026-32070

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-32070

CVE-2026-32070 affects Windows where the Common Log File System Driver contains an elevation-of-privilege flaw. The root cause is not explicitly described in the provided text, but the CVSS 3.1 metrics indicate a local attack vector with high impact on confidentiality, integrity, and availability...

BELL-CVE-2026-23425

Bulletin has no description...

BELL-CVE-2026-23422

Bulletin has no description...

CVE-2026-40183

creationtimestamp| type| source ---|---|--- 2026-04-14 01:17:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7jcn2t22k 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

SUSE CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

CVE-2026-40040

creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjflocwdbf2s 2026-04-13 20:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpjenntu2m 2026-04-13 21:22:40+00:00| seen|...

CVE-2025-11717

creationtimestamp| type| source ---|---|--- 2026-04-13 17:58:56+00:00| seen| Telegram/IuYToep-QLYvNUx4J0hYJ6AdyuytyxlIKzEtVTkECocrRgQ...

Malicious Package

Overview paysafe-payments-sdk-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...