CVE-2026-42285

creationtimestamp| type| source ---|---|--- 2026-05-07 14:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbh7mgfrb2k 2026-05-07 19:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvmgeszn2n...

CVE-2026-33587

creationtimestamp| type| source ---|---|--- 2026-05-07 14:27:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbgenzhu22n 2026-05-07 21:53:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc7bvidfi2g...

CVE-2026-41642

creationtimestamp| type| source ---|---|--- 2026-05-07 14:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbfkwcrnd2o 2026-05-07 21:06:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc4oenvqd2w...

CVE-2026-8080

creationtimestamp| type| source ---|---|--- 2026-05-07 14:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbeykz42c2c 2026-05-07 16:05:18+00:00| seen| https://social.circl.lu/@vulnerabilitylookup/116533236671872043...

CVE-2026-25468

creationtimestamp| type| source ---|---|--- 2026-05-07 13:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbekvjrcu2i...

CVE-2026-6805

creationtimestamp| type| source ---|---|--- 2026-05-07 13:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbegzas6x2i...

CVE-2026-41687 Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checks

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.8.1, the SSRF protection in endpoints/subscription/add.php line 42 and endpoints/payments/add.php line 40 uses an inline IP validation check FILTERFLAGNOPRIVRANGE | FILTERFLAGNORESRANGE that does not block...

CVE-2026-27416

creationtimestamp| type| source ---|---|--- 2026-05-07 13:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe4swj452v...

CVE-2026-27421

creationtimestamp| type| source ---|---|--- 2026-05-07 13:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbdrwbppn2i...

EUVD-2026-28342

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-4430

creationtimestamp| type| source ---|---|--- 2026-05-07 10:33:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlazbqzsac2i 2026-05-15 20:18:42+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mlw5ngxcuk2i 2026-06-25 14:56:40+00:00| seen|...

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-28201

Open Notebook v1.8.1 is affected by CVE-2026-28201 due to improper input validation and a permissive default CORS policy. A remote attacker can trick a legitimate user into altering or deleting arbitrary database entries via a specially crafted URL, with data exfiltration possible depending on de...

CVE-2026-44601

creationtimestamp| type| source ---|---|--- 2026-05-07 10:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaxktsipu2o...

CVE-2026-42194

creationtimestamp| type| source ---|---|--- 2026-05-07 09:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlawyv57id2c...

CVE-2026-6805

CVE-2026-6805 affects Cryptobox’s external sharing feature. An attacker who knows a sharing link URL can retrieve information from the server, enabling an offline brute-force attack against the access code associated with that link. The provided documents do not specify affected versions, mitigat...

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-6805 Vulnerability on Cryptobox external sharing feature

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-6805 Vulnerability on Cryptobox external sharing feature

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CLSA-2026-1778145319 python2: Fix of 3 CVEs

CVE-2025-8194: validate that tarfile member offsets are non-negative to prevent infinite loop / DoS during parsing of malicious tar archives - CVE-2026-4519: reject URLs with leading dashes in webbrowser.open to prevent injection of command-line options into spawned browser process -...