CVE-2026-8084

creationtimestamp| type| source ---|---|--- 2026-05-07 21:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc65ewtpz2i...

CVE-2026-8088

creationtimestamp| type| source ---|---|--- 2026-05-07 21:25:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5pti6tr2p...

CVE-2026-42501

creationtimestamp| type| source ---|---|--- 2026-05-07 21:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5lyf2ry2c...

CVE-2026-41929 Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor

Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parameter and componentajax POST parameter. Attackers can craft a malicious link or...

CVE-2026-41929 Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor

Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulating the r query parameter and componentajax POST parameter. Attackers can craft a malicious link or...

CVE-2026-43510

creationtimestamp| type| source ---|---|--- 2026-05-07 20:51:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc3sctkjq2n...

CVE-2026-42259

Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward...

CVE-2026-41905

creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrqtmyh2q...

CVE-2026-41904

creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrjfhau2r...

EUVD-2026-28431

Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward...

CVE-2026-42259

Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward...

CVE-2026-42011

creationtimestamp| type| source ---|---|--- 2026-05-07 18:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbtqne62b2r...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

EUVD-2026-28406

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-36458

creationtimestamp| type| source ---|---|--- 2026-05-07 17:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr2jyjvb2k...

CVE-2025-67202

creationtimestamp| type| source ---|---|--- 2026-05-07 17:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbquckepu2p...

CVE-2026-8093

creationtimestamp| type| source ---|---|--- 2026-05-07 17:10:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbph22zky2z 2026-05-11 07:46:10+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-5 2026-05-11 12:05:22+00:00| seen|...

CVE-2026-41688

creationtimestamp| type| source ---|---|--- 2026-05-07 17:06:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpafknnf2t 2026-05-07 18:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbsmrbmxi2c...