CVE-2026-45347

creationtimestamp| type| source ---|---|--- 2026-05-09 22:47:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-f776-fp4w-266c 2026-05-16 00:51:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmx6fwfz2t...

CVE-2026-42576

creationtimestamp| type| source ---|---|--- 2026-05-09 21:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7qghol32h...

CVE-2026-42245

creationtimestamp| type| source ---|---|--- 2026-05-09 21:13:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5y7rxta2k 2026-05-10 12:01:28+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplx57y32v 2026-07-18 12:01:17+00:00| seen|...

CVE-2026-8148

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5f6gkr42g...

CVE-2026-42562

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dtx2v42n 2026-05-09 21:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6fd7nxr2k 2026-06-05 14:49:28+00:00| seen|...

Malicious code in textwrap-ext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 da4e8d5daae9a14e0ceb5a942afd308068957ec655cdd950b2b041934e9ec182 During installation, obfuscated code exfiltrates cryptocurrency wallet data to a hardcoded location and places a backdoor through a new authorized SSH key...

CVE-2026-42224

creationtimestamp| type| source ---|---|--- 2026-05-09 19:54:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgzlgsxhl2k...

Malicious code in textwrap-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 029e190fc99763d65a096339b29fa85aeb0a23c3818a632a2dd4dc99f3e8fd64 During installation, obfuscated code exfiltrates cryptocurrency wallet data to a hardcoded location and places a backdoor through a new authorized SSH key...

CVE-2026-42309

creationtimestamp| type| source ---|---|--- 2026-05-09 08:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftrjndiz2i...

GHSA-2F25-PFQ3-C7H8

creationtimestamp| type| source ---|---|--- 2026-05-09 06:10:29+00:00| seen| https://gist.github.com/alon710/5630cef7c3595002259238662d69e7b6...

CVE-2026-7652

creationtimestamp| type| source ---|---|--- 2026-05-09 05:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfjwhj6lf2p 2026-05-10 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mljm6sv5v42x...

CVE-2026-8209

creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...

Authorization Bypass

com.arcadedb, arcadedb-server is vulnerable to Authorization Bypass. The vulnerability is due to improper initialization of access controls and missing security configuration during database creation, which allows an attacker to bypass database and record-level authorization restrictions...

CVE-2026-25077

creationtimestamp| type| source ---|---|--- 2026-05-09 05:06:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfhw52n2w2g...

CVE-2025-66171

creationtimestamp| type| source ---|---|--- 2026-05-09 04:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgjejuxq2i...

CVE-2026-42174 Kirby: User avatar creation, replacement and deletion are not gated by user update permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-42174

Kirby CMS (CVE-2026-42174) is vulnerable prior to updates 4.9.0 and 5.4.0: user avatars could be created, replaced, or deleted without proper user.update/users.update permission checks. The root cause is missing authorization gating for avatar actions, allowing users with only file permissions to...

CVE-2026-42174 Kirby: User avatar creation, replacement and deletion are not gated by user update permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-44987

creationtimestamp| type| source ---|---|--- 2026-05-09 03:04:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfb5itfpr2n...

CVE-2026-45130

creationtimestamp| type| source ---|---|--- 2026-05-09 02:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7zonifu2i 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27 2026-06-08 09:19:26+00:00| seen|...