GHSA-96VC-WCXF-JJFF

creationtimestamp| type| source ---|---|--- 2026-05-04 23:31:29+00:00| seen| https://gist.github.com/limcheekin/b22dc88a260c8e395b6d84d05bd62a04...

CVE-2026-7780

creationtimestamp| type| source ---|---|--- 2026-05-04 23:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2sjl3hup2h...

CVE-2026-42220

creationtimestamp| type| source ---|---|--- 2026-05-04 23:01:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ropkdtu2p 2026-05-05 21:10:29+00:00| seen| https://gist.github.com/alon710/26efd138450d4334005446be8418f3bc...

CVE-2026-42238

creationtimestamp| type| source ---|---|--- 2026-05-04 22:48:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qxefyhg2p 2026-05-05 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml2uyhgrmv2p 2026-05-05 00:00:42+00:00| seen|...

CVE-2026-43964

creationtimestamp| type| source ---|---|--- 2026-05-04 22:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qlyqxfh2k 2026-06-07 07:14:40+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mnommkdye732...

CVE-2026-41927

creationtimestamp| type| source ---|---|--- 2026-05-04 22:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qh4cjwc2v...

CVE-2026-34882

creationtimestamp| type| source ---|---|--- 2026-05-04 22:31:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2pyphieb2p...

CVE-2026-42235

creationtimestamp| type| source ---|---|--- 2026-05-04 21:11:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2lkclquk2r...

CVE-2026-7554

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitatio...

CVE-2026-7209

The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qcopd-directory shortcode in all versions up to, and including, 8.9.2. This is due to insufficient input sanitization and output escaping on user supplied attributes such as titlefontsize...

GHSA-2HH7-C75G-QJ2R OpenClaw validates Zalo outbound photo URLs through the SSRF guard

Summary Zalo outbound photo URLs are validated through the SSRF guard. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.4.21 - Fixed version: 2026.4.22 Impact The Zalo plugin could forward an attacker-controlled outbound photo URL to the Zalo Bot API without first...

CVE-2026-5161

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

CVE-2026-42154

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frwvvqg2l 2026-05-05 20:10:29+00:00| seen| https://gist.github.com/alon710/a8e4ac23aec9e5a4ede7f32cda789bc3 2026-05-07 18:07:47+00:00| seen|...

CVE-2026-42138

creationtimestamp| type| source ---|---|--- 2026-05-04 18:35:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q...

CVE-2026-42140

creationtimestamp| type| source ---|---|--- 2026-05-04 18:33:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cpesil22k...

CVE-2026-29514

creationtimestamp| type| source ---|---|--- 2026-05-04 18:28:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cgy4oyf2q...

CVE-2026-42230 n8n: Open Redirect in MCP OAuth Consent Flow

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirecturi values to be registered. When a user denies the MCP OAuth consent dialog,...

CVE-2026-42091

creationtimestamp| type| source ---|---|--- 2026-05-04 18:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cdogi7q2k...

CVE-2026-41571

creationtimestamp| type| source ---|---|--- 2026-05-04 18:24:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c6ljvvg2r 2026-05-04 20:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j2fwzwb2e...

CVE-2026-42374

creationtimestamp| type| source ---|---|--- 2026-05-04 18:04:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2b2wtauk2f 2026-05-04 18:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dt3hwol2i 2026-05-25 11:37:06+00:00| seen|...