CVE-2026-40169

creationtimestamp| type| source ---|---|--- 2026-04-14 01:47:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgb5yy7ua2m 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90 2026-05-22 06:10:50+00:00| seen|...

CVE-2026-39956

creationtimestamp| type| source ---|---|--- 2026-04-14 01:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgad4wdo72g...

CVE-2026-5815

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgimain of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only...

CVE-2026-40310

creationtimestamp| type| source ---|---|--- 2026-04-14 01:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7eg5akv2g 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

CVE-2026-33902

creationtimestamp| type| source ---|---|--- 2026-04-14 01:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg6udnmv22k 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

CVE-2026-40312

creationtimestamp| type| source ---|---|--- 2026-04-14 01:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg6qxn6yc2o 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

EUVD-2026-22120

A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File Download URL Handler. Such manipulation of the argument streamIp leads to server-side request forgery. It is possibl...

PT-2026-32856

CVE-2026-32212 Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally. https://t.co/8vH7ez64Tq...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the /urlgroup.asp endpoint...

Important: containerd

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

CVE-2026-33908

creationtimestamp| type| source ---|---|--- 2026-04-13 22:33:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfwcmpmsw2h 2026-04-13 23:21:32+00:00| published-proof-of-concept| Telegram/DNd18EV1mvoOjDBqQat4zOgBzw-F-OvAJ7pAjcWk8VU 2026-04-14 01:08:14+00:00| seen|...

CVE-2026-22564

creationtimestamp| type| source ---|---|--- 2026-04-13 22:32:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfwamtom625 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4 2026-04-14 00:58:16+00:00| seen|...

CVE-2026-39963

creationtimestamp| type| source ---|---|--- 2026-04-13 22:15:38+00:00| published-proof-of-concept| https://github.com/s9y/Serendipity/security/advisories/GHSA-4m6c-649p-f6gf 2026-04-15 04:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2bnxkza2k...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the webbrowser.open function. An attacker can execute arbitrary commands by supplying a specially crafted URL containing %action that is processed by the API. Note: This issue is due to incomplete fix fo...

CVE-2026-32283

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-04-17 12:01:42+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjouv2a7c72j 2026-05-06 14:30:23+00:00| seen|...

CVE-2026-40039

creationtimestamp| type| source ---|---|--- 2026-04-13 21:03:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfrbnntii2g...

CVE-2026-6199

creationtimestamp| type| source ---|---|--- 2026-04-13 20:58:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqyp7l242m 2026-04-13 21:22:51+00:00| published-proof-of-concept| Telegram/E9uORDS5VkHsQsN2ALVesQEvtj4s64kK7xuccSs6pLn-94...

CVE-2026-6197

creationtimestamp| type| source ---|---|--- 2026-04-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqgs65ao2t 2026-04-13 21:22:40+00:00| seen| Telegram/c7uZKOPwVy2hcS0GAJgtvZD1v9yKI-NyzhYNMP5jQugHxE...

CVE-2026-40041

creationtimestamp| type| source ---|---|--- 2026-04-13 20:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpw2qay42o...

CVE-2026-33659 EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side Request Forgery SSRF via a DNS rebinding TOCTOU condition. Host validation uses dnsgetrecord but the actual HTTP...