CVE-2022-50970

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50970 2026-05-10 15:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3silfkl2o...

CVE-2022-50961

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50961 2026-05-10 15:29:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj3alrvpk2n...

CVE-2022-50962

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50962 2026-05-10 15:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlizllrw432e...

CVE-2026-8212

creationtimestamp| type| source ---|---|--- 2026-05-10 01:24:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlzs5v7u2n...

CVE-2026-8213

creationtimestamp| type| source ---|---|--- 2026-05-10 01:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhlhvcjx42r...

CVE-2026-45184

creationtimestamp| type| source ---|---|--- 2026-05-10 01:05:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhkxbdvhd2k...

openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...

CVE-2026-45347

creationtimestamp| type| source ---|---|--- 2026-05-09 22:47:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-f776-fp4w-266c 2026-05-16 00:51:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmx6fwfz2t...

CVE-2026-45345

creationtimestamp| type| source ---|---|--- 2026-05-09 22:10:27+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp 2026-05-16 01:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwocnrknq2e...

CVE-2026-42576

creationtimestamp| type| source ---|---|--- 2026-05-09 21:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7qghol32h...

CVE-2026-8193

creationtimestamp| type| source ---|---|--- 2026-05-09 21:23:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6j67kg32e...

CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)

Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...

CVE-2026-42562

Plainpad (self-hosted note-taking app) is affected prior to version 1.1.1. A low-privilege, authenticated user can escalate to administrator by submitting admin=true in PUT /api.php/v1/users/{id}; the endpoint stores the admin attribute from user input, allowing immediate access to admin-only rou...

CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)

Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...

CVE-2026-42562 Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)

Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/id. The endpoint directly persists the admin attribute from user input, and the escalated accou...

CVE-2026-8188

creationtimestamp| type| source ---|---|--- 2026-05-09 18:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgvgaq6mk2n...

CVE-2026-8189

creationtimestamp| type| source ---|---|--- 2026-05-09 18:35:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgv5ccmxt2r...

CVE-2026-8215

creationtimestamp| type| source ---|---|--- 2026-05-09 16:16:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-8215 2026-05-10 04:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwehud7a2c...

Liberapay: another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link

Hello again i discovered that there is another Liberapay profile of Liberapay team member at liberapay.com/mdvhimself contains a link to an expired Twitter account, creating a Broken Link Hijacking BLH vulnerability. An attacker could register the expired handle and control what appears to be an...

OESA-2026-2226 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...