CVE-2025-69690

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the postrebootcommands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execut...

CVE-2026-42453

creationtimestamp| type| source ---|---|--- 2026-05-09 01:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf3icpcbg2v...

CVE-2026-44966

creationtimestamp| type| source ---|---|--- 2026-05-09 00:40:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-j658-c2gf-x6pq 2026-05-26 23:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vppgf52q 2026-05-27 01:07:12+00:00| seen|...

GHSA-8JR5-6GVJ-RFPF @yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

SSE Transport Has No Authentication and Wildcard CORS, Exposing All 86 GitLab Tools Including Destructive Operations A review of mcp-gitlab-server at commit 80a7b4cf3fba6b55389c0ef491a48190f7c8996a uncovered that the SSE HTTP transport — advertised in the README and comparison table as a...

PT-2026-39306

Name of the Vulnerable Software and Affected Versions GitLab MCP Server versions prior to 0.6.0 Description The HTTP transport in src/transport.ts lacks an authentication layer and implements a wildcard Access-Control-Allow-Origin: header on all responses. This allows any cross-origin browser...

CVE-2026-42195

creationtimestamp| type| source ---|---|--- 2026-05-08 23:29:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlev5a4qp62k...

CVE-2026-42302

creationtimestamp| type| source ---|---|--- 2026-05-08 23:25:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuuesn3g2q 2026-05-09 00:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf24tccw72t 2026-05-09 04:30:30+00:00| seen|...

CVE-2026-42213

creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleuu7yjok2o...

CVE-2026-42345

creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleutwfvsi2z...

CVE-2026-42354

creationtimestamp| type| source ---|---|--- 2026-05-08 23:22:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleupkgzli2z 2026-05-09 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116541675237436780 2026-05-09 00:00:42+00:00| seen|...

CVE-2026-42352

creationtimestamp| type| source ---|---|--- 2026-05-08 23:22:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleupdajst2n 2026-05-09 00:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlezw4c6mx2o...

CVE-2026-42351

creationtimestamp| type| source ---|---|--- 2026-05-08 23:20:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleum3owqg2s...

CVE-2026-42556

creationtimestamp| type| source ---|---|--- 2026-05-08 23:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleultxumj2z 2026-05-09 01:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf3rb64qt2e...

CVE-2026-42454

creationtimestamp| type| source ---|---|--- 2026-05-08 23:20:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleulmg5zy2e 2026-05-09 01:08:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf2nhdgwr2q 2026-05-09 01:30:32+00:00| seen|...

CVE-2026-42556

Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their own save request and send the public preview link /p/?share=true to another user. The preview page...

CVE-2026-44330

creationtimestamp| type| source ---|---|--- 2026-05-08 23:02:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rwww-x45w-p52w 2026-05-28 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmwaoshibg2p...

CVE-2026-42190

creationtimestamp| type| source ---|---|--- 2026-05-08 22:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlesw5ku2r2n...

CVE-2026-25199

creationtimestamp| type| source ---|---|--- 2026-05-08 22:29:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlerqoxyid2w 2026-05-09 05:01:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfhn5uh3l2v...

CVE-2026-42556

Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their own save request and send the public preview link /p/?share=true to another user. The preview page...

EUVD-2026-28866

Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their own save request and send the public preview link /p/?share=true to another user. The preview page...