CVE-2026-33021

creationtimestamp| type| source ---|---|--- 2026-04-15 00:03:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjilshi4vc2t 2026-04-15 01:19:21+00:00| published-proof-of-concept| Telegram/GYbH54sRbOOqgznzSrvNbIPKqa8TpEiUvDUzTYtUUyxy-E...

CVE-2026-34001

creationtimestamp| type| source ---|---|--- 2026-04-15 00:01:54+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjilqa5my42c 2026-04-15 00:01:58+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjilqdjg3t2u 2026-04-19 02:01:28+00:00| seen|...

CVE-2026-39399

creationtimestamp| type| source ---|---|--- 2026-04-15 00:00:44+00:00| seen| https://infosec.exchange/users/offseq/statuses/116405780065874253 2026-04-15 00:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjilo7aecu2j 2026-04-15 01:17:47+00:00| seen|...

Powershell Profile Persistence

This Metasploit module establishes persistence by modifying a PowerShell profile script, which is automatically executed when PowerShell starts. The module supports multiple profile scopes current user or all users and safely backs up any existing profile prior to modification, enabling clean...

PT-2026-33216

Name of the Vulnerable Software and Affected Versions Kimai affected versions not specified Description An incomplete security patch in the client-side escapeForHtml function within KimaiEscape.js allows for Stored Cross-Site Scripting XSS. The function fails to escape double quotes " and single...

CVE-2026-34631

creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:29+00:00| published-proof-of-concept| Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKoGk9-znXQ 2026-04-15 12:08:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjudk3jdv2m 2026-06-13 09:07:08+00:00| seen|...

CVE-2026-35196

creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:29+00:00| published-proof-of-concept| Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKoGk9-znXQ 2026-04-15 12:08:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjudrmv7g2u...

CVE-2026-41060

creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:01+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-j432-4w3j-3w8j 2026-04-21 23:22:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk24rzao262t 2026-04-22 01:19:03+00:00| seen|...

CVE-2026-27282

creationtimestamp| type| source ---|---|--- 2026-04-14 23:21:52+00:00| seen| Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E 2026-04-15 01:56:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjis4gfiax2a 2026-04-15 12:08:47+00:00| seen|...

CVE-2026-34623

creationtimestamp| type| source ---|---|--- 2026-04-14 20:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7tdynvb2m 2026-04-15 02:35:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjiudgvh662q...

CVE-2026-34624

creationtimestamp| type| source ---|---|--- 2026-04-14 20:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7og3dqh2z 2026-04-15 02:35:47+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjiudfflxk2j...

CVE-2026-34614

creationtimestamp| type| source ---|---|--- 2026-04-14 20:21:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7frytpy23...

CVE-2026-5756

creationtimestamp| type| source ---|---|--- 2026-04-14 20:17:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji76e35s22o 2026-04-16 15:19:33+00:00| seen| Telegram/xaMuklUmIhmgdshubo3uV9apJJHbiRRivMdJ18LxU3A0Q4Q...

CVE-2026-5754

creationtimestamp| type| source ---|---|--- 2026-04-14 20:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6ut4wkl2k...

CVE-2026-27289

creationtimestamp| type| source ---|---|--- 2026-04-14 20:10:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6rygv4l23 2026-04-14 20:19:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7cuopwy2a 2026-04-14 21:25:30+00:00| published-proof-of-concept|...

CVE-2026-5752

creationtimestamp| type| source ---|---|--- 2026-04-14 20:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji6pbziwj23 2026-04-14 21:25:30+00:00| published-proof-of-concept| Telegram/qw6naPQmOSFEqbc3iRVVM5dhGETt1a49wBj6uReZM5MuI0 2026-04-15 03:00:28+00:00| seen|...

CVE-2025-63743

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...

ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.

An heap use after free when reading an invalid XMP profile could result in a crash due to an heap use after free when printing the values...

GHSA-R83H-CRWP-3VM7 ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.

An heap use after free when reading an invalid XMP profile could result in a crash due to an heap use after free when printing the values...

CVE-2026-4913

creationtimestamp| type| source ---|---|--- 2026-04-14 18:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhyzpl32h2x 2026-04-15 13:55:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cdepzo2r 2026-04-15 14:45:22+00:00| seen|...