CVE-2026-31818

creationtimestamp| type| source ---|---|--- 2026-04-03 16:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4os2sdg24 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0 2026-04-04 06:17:36+00:00| seen|...

UBUNTU-CVE-2026-23460

In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rosetransmitlink on reconnect syzkaller reported a bug 1, and the reproducer is available at 2. ROSE sockets use four sk-skstate values: TCPCLOSE, TCPLISTEN, TCPSYNSENT, and TCPESTABLISHE...

CVE-2025-59709

creationtimestamp| type| source ---|---|--- 2026-04-03 16:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4cde4d423...

CVE-2026-31403

creationtimestamp| type| source ---|---|--- 2026-04-03 16:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim46qlf6e2n 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen...

CVE-2026-31401

creationtimestamp| type| source ---|---|--- 2026-04-03 16:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3v7xn6d25 2026-04-03 17:08:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116341872109036576...

CVE-2026-5470 mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forgery

A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83. This issue affects the function extractContent of the file src/services/content-extractor.service.ts of the component Model Context Protoc...

GHSA-GHC5-95C2-VWCV

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3milzkcnizop2 2026-04-03 16:52:24+00:00| seen|...

CVE-2025-59710

An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the...

CVE-2026-31394 mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211chanbwchange for APVLAN stations ieee80211chanbwchange iterates all stations and accesses link-reserved.oper via sta-sdata-linklinkid. For stations on APVLAN interfaces e.g. 4addr WDS clients,...

CVE-2026-5458

creationtimestamp| type| source ---|---|--- 2026-04-03 08:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milcbynbfi22...

CVE-2026-35535

creationtimestamp| type| source ---|---|--- 2026-04-03 04:30:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikv5ha62s2n 2026-04-03 05:15:36+00:00| published-proof-of-concept| Telegram/pXUM2jaw9GgU28Sl0meXOcFoAiVepufvCfRhEfvGcf7OCXo 2026-04-06 14:30:04+00:00|...

CVE-2026-35507

creationtimestamp| type| source ---|---|--- 2026-04-03 04:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktznighg2q...

CVE-2026-35536

creationtimestamp| type| source ---|---|--- 2026-04-03 04:05:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktqoyjm523 2026-04-03 05:15:36+00:00| published-proof-of-concept| Telegram/pXUM2jaw9GgU28Sl0meXOcFoAiVepufvCfRhEfvGcf7OCXo 2026-09-02 14:33:48+00:00| seen|...

CVE-2026-5452

creationtimestamp| type| source ---|---|--- 2026-04-03 04:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktizeafs2n...

CVE-2026-3976

creationtimestamp| type| source ---|---|--- 2026-04-03 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikh5slioz27...

PT-2026-30235

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.2 Description The application reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. An attacker capturing the redirect URL can obtain both the...

PT-2026-30154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the net/rose component where a NULL pointer dereference could occur in the rose transmit link function during a reconnect attempt. This issue arose...

The vulnerability of the `cros_ec_codec_platform_probe()` function in the `sound/soc/codecs/cros_ecCodec.c` module allows a hacker to cause a system failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the croseccodecplatformprobe function in the sound/soc/codecs/crosecCodec.c module, which is part of the Linux operating system’s SoC audio support, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the mt8173_rt5650_dev_probe() function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.

The vulnerability of the mt8173rt5650devprobe function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is related to the Linux operating system’s sound support for SoC cores, is associated with errors during link counter updates. Exploiting this vulnerability could allow an...

The vulnerability of the imx_rproc_addr_init() function in the drivers/remoteproc/imx_rproc.c file of the Linux operating system’s remote processor subsystem allows a hacker to cause a service failure.

The vulnerability of the imxrprocaddrinit function in the drivers/remoteproc/imxrproc.c file of the Linux kernel’s remote processor subsystem is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...