PT-2026-39459

Name of the Vulnerable Software and Affected Versions CodeAstro Online Catering Ordering System version 1.0 Description Remote SQL injection is possible via the manipulation of the ID argument in the '/deleteorder.php' endpoint. SQL injection is a technique where malicious SQL statements are...

CVE-2026-8213

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h...

CVE-2026-42258

creationtimestamp| type| source ---|---|--- 2026-05-09 21:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6bqgjhp2c 2026-05-10 12:01:26+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplvolm72y 2026-07-18 12:01:14+00:00| seen|...

CVE-2026-8196

creationtimestamp| type| source ---|---|--- 2026-05-09 21:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5soy25r2h 2026-05-13 15:00:06+00:00| seen| Telegram/cc4rNasGAf6eBRoD2kZTJIxW5lr85DmN8AZG7mw1GXsUUwc...

CVE-2026-8148

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5f6gkr42g...

CVE-2026-42309

creationtimestamp| type| source ---|---|--- 2026-05-09 08:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftrjndiz2i...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual...

BELL-CVE-2026-43459

Bulletin has no description...

BELL-CVE-2026-43373

Bulletin has no description...

BELL-CVE-2026-43445

Bulletin has no description...

BELL-CVE-2026-43314

Bulletin has no description...

GHSA-MV93-W799-CJ2W

creationtimestamp| type| source ---|---|--- 2026-05-09 05:40:29+00:00| seen| https://gist.github.com/alon710/be4c0540ec919d713e0bd6ccf621615c...

CVE-2025-66170

creationtimestamp| type| source ---|---|--- 2026-05-09 04:46:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgsdlek52e 2026-05-10 06:15:00+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mli4aews2d22...

CVE-2026-41705

creationtimestamp| type| source ---|---|--- 2026-05-09 04:30:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlffwxr3u52o 2026-05-09 18:44:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnclkqn2g 2026-05-11 09:04:11+00:00| seen|...

CVE-2026-42560 auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation

auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the Patreon account returned by Patreon. ...

CVE-2026-42560

The CVE describes a vulnerability in the Patreon OAuth provider used by github.com/go-pkgz/auth, where the mapUser logic computes a local user ID from an uninitialized field, causing every Patreon-authenticated user to share the same local identity. The GHSA advisory details show the code path wh...

CVE-2026-41163

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. This allows the attacker to arbitraril...

CVE-2026-44313

creationtimestamp| type| source ---|---|--- 2026-05-09 02:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfallignb2e 2026-05-09 18:44:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnqcqgb2w...

SUSE CVE-2025-14576

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of...

SUSE CVE-2026-43208

In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...