CVE-2026-34579 MantisBT has an authorization bypass via private issue monitoring

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior are vulnerable to Authorization Bypass through the private issue monitoring feature . Using a crafted POST request to bugmonitoradd.php, a user with project-level access can add themselves as a monitor for a...

CVE-2026-41470

creationtimestamp| type| source ---|---|--- 2026-05-19 21:18:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmacvwwmpk2o...

CVE-2026-8370

creationtimestamp| type| source ---|---|--- 2026-05-19 21:08:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmace22tj42e 2026-06-03 11:00:53+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnexforxoj2j...

Malicious code in clearml-truen-patch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868fbff2db730a4a67f808b6c9bd35aa78392be592adb2d66d6be659772610f6 This package is published as clearml-truen-patch but its PKG-INFO/setup.py declare Author=ClearML, [email protected], and...

MAL-2026-4745 Malicious code in clearml-truen-patch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868fbff2db730a4a67f808b6c9bd35aa78392be592adb2d66d6be659772610f6 This package is published as clearml-truen-patch but its PKG-INFO/setup.py declare Author=ClearML, [email protected], and...

CVE-2026-5804

creationtimestamp| type| source ---|---|--- 2026-05-19 20:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma6mukini2w 2026-05-19 20:27:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaa3qho232q...

CVE-2026-44484

creationtimestamp| type| source ---|---|--- 2026-05-19 20:01:31+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mma6mln2s22w...

CVE-2023-24215

Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a crafted POST request...

CVE-2026-47107

creationtimestamp| type| source ---|---|--- 2026-05-19 19:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3caufwf2z 2026-05-19 20:42:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaavi3n5u2p...

CVE-2026-42654

creationtimestamp| type| source ---|---|--- 2026-05-19 18:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm7zmqqa752c...

Metasploitable3-pentest-lab

🛡️ Metasploitable3 — Home Lab Penetration Test Report Aut...

CVE-2026-31387

creationtimestamp| type| source ---|---|--- 2026-05-19 18:15:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7ypsdbmq2z...

CVE-2026-47357

creationtimestamp| type| source ---|---|--- 2026-05-19 18:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm7xufh4x52n 2026-05-19 20:47:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmab6gl2jh2r...

CVE-2026-31910

creationtimestamp| type| source ---|---|--- 2026-05-19 17:43:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7ww5oniz25 2026-05-31 11:01:49+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g2mdm2m2w...

CVE-2026-8971

creationtimestamp| type| source ---|---|--- 2026-05-19 17:13:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7va6tub62e 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520...

CVE-2026-8966

creationtimestamp| type| source ---|---|--- 2026-05-19 17:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7ulixcic2q 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520...

CVE-2026-42539

creationtimestamp| type| source ---|---|--- 2026-05-19 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7rh74g2w2u 2026-06-04 23:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirkk6m7z2f...

Nuxt: Reflected XSS in `navigateTo()` external redirect

Summary navigateTo with external: true generates a server-side HTML redirect body containing a tag. The destination URL is only sanitized by replacing " with %22, leaving , &, and ' unencoded. An attacker who can influence the URL passed to navigateTourl, external: true can break out of the...

CVE-2026-5306

creationtimestamp| type| source ---|---|--- 2026-05-19 14:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm7m7ma57d2a...

CVE-2026-42097

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...