CVE-2026-34791

creationtimestamp| type| source ---|---|--- 2026-04-02 16:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijojg7cqy2i 2026-04-02 17:37:38+00:00| seen| Telegram/s8qY890P48N3Wo9aQa8rI-zenhf5cWovFj-1HEcEoggzt84 2026-04-03 09:00:36+00:00| seen|...

CVE-2026-34792

creationtimestamp| type| source ---|---|--- 2026-04-02 16:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijoa2f3mu2o 2026-04-02 17:37:38+00:00| seen| Telegram/s8qY890P48N3Wo9aQa8rI-zenhf5cWovFj-1HEcEoggzt84 2026-04-03 08:00:49+00:00| seen|...

CVE-2026-25197

creationtimestamp| type| source ---|---|--- 2026-04-02 16:00:04+00:00| seen| https://t.me/GithubRedTeam/78481 2026-04-02 21:00:04+00:00| published-proof-of-concept| Telegram/xPemCocsCKUXmxN-FoOBBJ3iutE4pbP0FjqrQP2HmxHDku0 2026-04-03 23:15:42+00:00| seen|...

CVE-2025-10681

creationtimestamp| type| source ---|---|--- 2026-04-02 16:00:04+00:00| seen| https://t.me/GithubRedTeam/78481 2026-04-03 22:55:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimsw3g6bp2i 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

🧨 Metasploitable 2 Penetration Testing Lab 📅 Duration 2026...

CVE-2025-58136 Apache Traffic Server: A simple legitimate POST request causes a crash

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

CVE-2025-58136 Apache Traffic Server: A simple legitimate POST request causes a crash

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

CVE-2025-58136

Apache Traffic Server is affected by CVE-2025-58136 due to a bug in POST request handling that can crash the server under certain conditions. Affected versions are 10.0.0–10.1.1 and 9.0.0–9.2.12. The issue is fixed in 10.1.2 and 9.2.13; upgrading is recommended. As a workaround for older releases...

CVE-2025-58136

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

Cookie-controlled PHP webshells: A stealthy tradecraft in Linux hosting environments

In this article 1. Cookie-controlled execution behavior 2. Observed variants of cookie-controlled PHP web shells 3. Mitigation and protection guidance 4. Microsoft Defender XDR detections 5. Microsoft Security Copilot prompts 6. Microsoft Defender XDR threat analytics 7. MITRE ATT&CK™ Techniques...

CVE-2024-44020

creationtimestamp| type| source ---|---|--- 2026-04-02 15:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijiy7raoq2w...

CVE-2026-0828

creationtimestamp| type| source ---|---|--- 2026-04-02 14:52:55+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mijhhjdi3f2u 2026-04-02 16:54:00+00:00| published-proof-of-concept| https://t.me/P0x3k1N73LL1G3NC3/310 2026-04-02 21:00:04+00:00| published-proof-of-concept|...

CVE-2026-23417

creationtimestamp| type| source ---|---|--- 2026-04-02 14:02:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijen2o7ei23 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-4634

Keycloak exposes a Denial of Service vulnerability (CVE-2026-4634) where an unauthenticated attacker can trigger excessive resource consumption by sending a specially crafted POST to the OpenID Connect token endpoint with an excessively long scope parameter, causing prolonged processing and servi...

cpython: POP3 command injection in user-controlled commands

A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...

CVE-2026-35394

creationtimestamp| type| source ---|---|--- 2026-04-02 11:04:41+00:00| published-proof-of-concept| https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-5qhv-x9j4-c3vm 2026-04-06 23:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuexqa2cz25 2026-04-06...

CVE-2026-29144

creationtimestamp| type| source ---|---|--- 2026-04-02 11:00:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mij2ipolcd2s 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI...

CVE-2026-29135

creationtimestamp| type| source ---|---|--- 2026-04-02 10:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miizevl4x42n 2026-04-16 21:19:51+00:00| seen| Telegram/3Rneua8sJN4acwbkH9WJwYA0S4fbpKs2cDcX7PKNKVaNXM...