CVE-2026-8106

CVE-2026-8106 describes a reflected HTML injection in the GitHub Enterprise Server Management Console login page. The vulnerability lies in the redirect_to query parameter on the /setup/unlock endpoint, which is reflected into an HTML attribute without proper sanitization. An attacker could entic...

CVE-2026-33814

creationtimestamp| type| source ---|---|--- 2026-05-07 21:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc56sidqx2t 2026-05-08 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoneo25g2l 2026-05-15 12:30:07+00:00| seen|...

CVE-2026-30817

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

CVE-2026-30816

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

CVE-2026-30815

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

CVE-2023-27573

creationtimestamp| type| source ---|---|--- 2026-05-07 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mlbvyckkiy2s...

GHSA-54PG-9963-V8VG

creationtimestamp| type| source ---|---|--- 2026-05-07 18:40:29+00:00| seen| https://gist.github.com/alon710/8afde5a27397b507920e321a8ed8bd55...

CVE-2026-39511

creationtimestamp| type| source ---|---|--- 2026-05-07 18:33:38+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mlbu4gi6bs26...

CVE-2026-42011

creationtimestamp| type| source ---|---|--- 2026-05-07 18:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbtqne62b2r...

CVE-2026-44264

creationtimestamp| type| source ---|---|--- 2026-05-07 18:22:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbthoa76b2o...

CVE-2026-41519

creationtimestamp| type| source ---|---|--- 2026-05-07 17:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbrsydlor2o...

CVE-2026-36458

creationtimestamp| type| source ---|---|--- 2026-05-07 17:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr2jyjvb2k...

CVE-2025-67202

creationtimestamp| type| source ---|---|--- 2026-05-07 17:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbquckepu2p...

CVE-2026-41490

creationtimestamp| type| source ---|---|--- 2026-05-07 17:09:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgl5w4l2e 2026-05-07 19:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbwqptavd2e 2026-06-13 11:00:13+00:00| published-proof-of-concept|...

Origin Validation Error

Overview cinny is a Yet another matrix client Affected versions of this package are vulnerable to Origin Validation Error in the process that handles emoji pack avatar URLs in the service worker. An attacker can obtain a victim's access token by crafting a malicious emote pack with an...

CVE-2026-40108

creationtimestamp| type| source ---|---|--- 2026-05-07 16:00:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-06-02 13:45:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4nolce2y 2026-06-03 01:30:27+00:00| seen|...

CVE-2026-5791

creationtimestamp| type| source ---|---|--- 2026-05-07 15:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbjeviuvr2o 2026-05-07 19:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvlxsvwh2q 2026-05-07 19:22:38+00:00| seen|...

CVE-2026-44263

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...

PYSEC-2026-2318

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...

CVE-2026-6795

creationtimestamp| type| source ---|---|--- 2026-05-07 15:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbisvazsw2p 2026-05-07 17:09:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgkc5da2c 2026-05-07 17:30:13+00:00| seen|...