CVE-2026-40490

creationtimestamp| type| source ---|---|--- 2026-04-18 05:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqqiz4c7y2f...

CVE-2026-40338

creationtimestamp| type| source ---|---|--- 2026-04-18 01:51:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqdb4gftn2k...

CVE-2026-40341

creationtimestamp| type| source ---|---|--- 2026-04-18 01:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcseoq7w2f...

CVE-2026-35465

creationtimestamp| type| source ---|---|--- 2026-04-18 01:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcoadc462s 2026-04-18 03:16:44+00:00| published-proof-of-concept| Telegram/uiCSDEnb8aQmWF7FrTZmjJQGi4eEk-7sLrqhzwnkCLApk...

CVE-2026-40336

creationtimestamp| type| source ---|---|--- 2026-04-18 01:36:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcgskzgb26...

CVE-2026-40482

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 02:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqe6ggy5x2t...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the webhook process. An attacker can exhaust system memory by sending oversized POST payloads before signature validation. This is only exploitable if Stripe webhooks are enabled a...

CVE-2026-40250

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq547cnbt27 2026-04-21 02:19:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxw7aqjsr2q 2026-04-21 03:18:08+00:00| seen|...

CVE-2026-39316

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:25+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5453nut2m...

CVE-2026-39314

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5442fbv2n...

CVE-2026-27447

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:23+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq542v5rm2c...

WordPress plugin Content Blocks (Custom Post Widget) 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

lcms2 -- Integer overflow

https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0 reports: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...

CVE-2026-40321

creationtimestamp| type| source ---|---|--- 2026-04-17 23:20:15+00:00| published-proof-of-concept| Telegram/3g7V6SV71PzaXn8Yubvw4Z7qK4NE-jaYcye5068Hc2mjiw 2026-04-17 23:20:20+00:00| published-proof-of-concept| Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI 2026-04-17 23:25:49+00:00| see...

CVE-2026-40299

creationtimestamp| type| source ---|---|--- 2026-04-17 22:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpy6yorgq2f...

CVE-2026-40282

creationtimestamp| type| source ---|---|--- 2026-04-17 22:09:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpwunafws2f...

EUVD-2026-23498

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

EUVD-2026-23480

Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment environment...

CVE-2026-40285

creationtimestamp| type| source ---|---|--- 2026-04-17 21:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjptymtwiu2z 2026-04-17 22:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpwoi7zso26 2026-04-17 23:20:07+00:00| published-proof-of-concept|...

CVE-2026-40527

creationtimestamp| type| source ---|---|--- 2026-04-17 21:18:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjptyfkbwr26 2026-04-17 22:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpypmpub22q 2026-04-17 23:20:15+00:00| published-proof-of-concept|...