CVE-2026-44581

creationtimestamp| type| source ---|---|--- 2026-05-07 23:40:51+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:12+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:0...

CVE-2026-6736

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

CVE-2026-8142

creationtimestamp| type| source ---|---|--- 2026-05-07 22:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlca2zkgkf2q...

CVE-2026-33811

creationtimestamp| type| source ---|---|--- 2026-05-07 21:57:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7j3x7ns2v 2026-05-08 12:01:02+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoncri5b2g 2026-05-15 16:19:42+00:00| seen|...

CVE-2025-68060

creationtimestamp| type| source ---|---|--- 2026-05-07 21:53:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc7cdvech2w 2026-05-17 08:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlzx5yrq2q2c...

CVE-2026-42449

creationtimestamp| type| source ---|---|--- 2026-05-07 21:51:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc75hcav22e 2026-05-07 23:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcftqxeo72p 2026-05-18 02:07:08+00:00| seen|...

CVE-2026-39817

creationtimestamp| type| source ---|---|--- 2026-05-07 21:30:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5yhwc332k...

CVE-2026-44742

creationtimestamp| type| source ---|---|--- 2026-05-07 21:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5eyncrc2r 2026-06-19 12:45:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ba9994-41dc-45f7-b8e9-ac330a61d59b 2026-06-23...

CVE-2026-44243

creationtimestamp| type| source ---|---|--- 2026-05-07 21:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5bswnv72i 2026-05-12 21:03:25+00:00| seen| https://gist.github.com/trippersham/98c56220f8edca1dd84337d7c1d67182...

CVE-2026-6736

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

CVE-2026-6736 Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

CVE-2026-8142 CVE-2026-8142

VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...

CVE-2026-8142 CVE-2026-8142

VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the referencia field in the product creation process. An attacker can execute arbitrary JavaScript in the browser of another authenticated user by injecting a crafted value into the referencia field, which i...

CVE-2026-41904

creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrjfhau2r...

CVE-2023-27573

creationtimestamp| type| source ---|---|--- 2026-05-07 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mlbvyckkiy2s...

CVE-2026-40003

creationtimestamp| type| source ---|---|--- 2026-05-07 19:00:14+00:00| seen| Telegram/PzhmRpnH0GKl-gQSVtV4RydjOIkDAHQ-MCr1tu85IjwQYE 2026-05-07 21:00:05+00:00| seen| Telegram/vzTACITSxs978bepVF2fAbJ-LA46ia7V8AwPJb289jK3goA...

GHSA-54PG-9963-V8VG

creationtimestamp| type| source ---|---|--- 2026-05-07 18:40:29+00:00| seen| https://gist.github.com/alon710/8afde5a27397b507920e321a8ed8bd55...

EUVD-2026-28390

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...

CVE-2026-44243

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...