CVE-2026-6068

creationtimestamp| type| source ---|---|--- 2026-04-10 14:05:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5ijg32n22q 2026-05-21 09:49:47+00:00| seen| https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3mme5ekfzk7a2 2026-05-27 14:27:12+00:00| seen|...

CVE-2026-5777

creationtimestamp| type| source ---|---|--- 2026-04-10 13:15:14+00:00| seen| Telegram/i-zqNxfifOft3SGRI6OteHJ0Qzh-0mNgaMvnr-w9bhb2A 2026-04-10 14:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5jynpe2324...

CVE-2026-24030

creationtimestamp| type| source ---|---|--- 2026-04-10 11:12:06+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mj56tz53fs2q...

CVE-2026-6034

creationtimestamp| type| source ---|---|--- 2026-04-10 10:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj55hzsmqy27...

CVE-2026-6030

creationtimestamp| type| source ---|---|--- 2026-04-10 10:37:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj54w4ws432d...

CVE-2026-6042

creationtimestamp| type| source ---|---|--- 2026-04-10 10:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj54hqcl4425 2026-04-14 15:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/80269 2026-04-14 19:00:09+00:00| published-proof-of-concept|...

CVE-2026-6032

creationtimestamp| type| source ---|---|--- 2026-04-10 10:20:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj53xh4xkf2n...

CVE-2026-33456

creationtimestamp| type| source ---|---|--- 2026-04-10 10:13:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj53kyce6o25 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY...

GHSA-8WRQ-FV5F-PFP2 parisneo/lollms vulnerable to stored XSS in the social feature

A Stored Cross-Site Scripting XSS vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0. The vulnerability exists in the createpost function within backend/routers/social/init.py, where user-provided content is directly assigned to the...

CVE-2026-25328

creationtimestamp| type| source ---|---|--- 2026-04-10 09:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4z5ogibk2x...

CVE-2026-40160

creationtimestamp| type| source ---|---|--- 2026-04-10 08:17:13+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40160 2026-04-10 18:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5x6irh2f2o 2026-04-10 19:28:28+00:00|...

CVE-2026-40100

creationtimestamp| type| source ---|---|--- 2026-04-10 08:17:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40100 2026-04-10 18:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5wcxli3b2m...

CVE-2026-25034

creationtimestamp| type| source ---|---|--- 2026-04-10 07:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4sh3x5l72t...

CVE-2026-6027

creationtimestamp| type| source ---|---|--- 2026-04-10 07:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rsimiwh27 2026-04-10 07:18:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rt6n3vq27 2026-04-10 08:52:52+00:00| seen|...

CVE-2026-1115

A Stored Cross-Site Scripting XSS vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0. The vulnerability exists in the createpost function within backend/routers/social/init.py, where user-provided content is directly assigned to the...

Malicious code in @genoma-ui/components (npm)

Malicious package detected. It uses pre/post install scripts to download/execute code and exfiltrate user data via curl from a hardcoded IP. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb9acd5bf2a73c82be9ac19b7c0cad285cfea2a4b6ff69655f61e7e4a0c26c The...

MAL-2026-2823 Malicious code in @genoma-ui/components (npm)

Malicious package detected. It uses pre/post install scripts to download/execute code and exfiltrate user data via curl from a hardcoded IP. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb9acd5bf2a73c82be9ac19b7c0cad285cfea2a4b6ff69655f61e7e4a0c26c The...

CVE-2026-6006

creationtimestamp| type| source ---|---|--- 2026-04-10 06:31:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4p6vauzx25...

EUVD-2026-21307

A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out...

EUVD-2026-21312

A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. T...