CVE-2026-7259

creationtimestamp| type| source ---|---|--- 2026-05-08 05:51:08+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mlczxuq7ac2w 2026-05-08 08:02:11+00:00| seen| https://bsky.app/profile/slackers.it/post/3mldbca2ylb2w 2026-05-10 07:12:43+00:00| seen|...

CVE-2026-4655

creationtimestamp| type| source ---|---|--- 2026-05-08 05:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlcyxo2xdw2i...

CVE-2026-8128

creationtimestamp| type| source ---|---|--- 2026-05-08 05:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcyrq4mm42k...

CVE-2026-42273

creationtimestamp| type| source ---|---|--- 2026-05-08 04:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcwl7ndjp2c...

CVE-2026-42272

creationtimestamp| type| source ---|---|--- 2026-05-08 04:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcw5olsko2e...

CVE-2026-42271

creationtimestamp| type| source ---|---|--- 2026-05-08 04:40:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcvztlzbz2q 2026-05-10 01:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhknapjpo2t 2026-05-20 09:00:05+00:00| published-proof-of-concept|...

CVE-2026-42274

creationtimestamp| type| source ---|---|--- 2026-05-08 04:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcvppit5j2k...

CVE-2026-29201

creationtimestamp| type| source ---|---|--- 2026-05-08 04:00:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-13 2026-05-08 11:49:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cpanel-security-advisory-av26-437 2026-05-08 12:44:09+00:00| seen|...

CVE-2026-43941 Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal...

SUSE CVE-2026-33079

In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS Regular Expression Denial of Service vulnerability in LINKTITLERE that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular expression used for parsing link titles contains overlapping...

CVE-2026-8116

creationtimestamp| type| source ---|---|--- 2026-05-08 01:49:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcmigrg3t2k...

CVE-2026-8113

creationtimestamp| type| source ---|---|--- 2026-05-08 01:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcktwnxfo2k...

CVE-2026-8106

creationtimestamp| type| source ---|---|--- 2026-05-08 01:16:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlckn6rszr2e...

CVE-2026-41929

creationtimestamp| type| source ---|---|--- 2026-05-08 01:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcjubv62j2n...

CVE-2026-3480

creationtimestamp| type| source ---|---|--- 2026-05-08 00:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlci76zisw2i...

GHSA-V7QW-HX66-4W9X

creationtimestamp| type| source ---|---|--- 2026-05-08 00:10:29+00:00| seen| https://gist.github.com/alon710/02ced0e410eaef25c3c5fc6010a5eb1d...

SysReptor 安全漏洞

SysReptor is an open-source penetration testing report platform developed by Syslifters. Versions of SysReptor from 2026.4 to 2026.27 contained security vulnerabilities. These vulnerabilities stemmed from improper authorization at the endpoints when reading and creating personal note-sharing link...

PT-2026-39119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's caif serial line discipline. The problem occurs in the TX path when tty write room is called, leading to a faulting access on...

PT-2026-38893

Name of the Vulnerable Software and Affected Versions Auto Affiliate Links versions prior to 6.8.9 Description The plugin is subject to Stored Cross-Site Scripting due to insufficient input sanitization of the url POST parameter within the aal url stats save action function and a lack of output...

PT-2026-39294

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.3.5 through 0.8.12 Description A stored cross-site scripting XSS issue allows authenticated users with model creation permissions workspace.models to execute arbitrary JavaScript in the browsers of other users, including...