CVE-2026-41728

creationtimestamp| type| source ---|---|--- 2026-06-10 02:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvmidjznu2i 2026-06-10 12:10:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnwojru2dg2j...

PT-2026-41417

Claude Mythos Preview case studies also, read your transcripts! https://t.co/drNlAH5mLE "Mythos demonstrates its bug reproduction and exploitation capabilities on CVE-2024-051912, an in-the-wild exploited bug that has no public report nor a working PoC whatsoever in the public domain. This bug ha...

CVE-2026-39937

creationtimestamp| type| source ---|---|--- 2026-04-07 23:21:44+00:00| seen| Telegram/6bLFJGC-3U2uX2XtN90OcJAyTS9ndxhmaOcnguxEO8P60w 2026-04-08 00:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mix3akyep42i...

CVE-2026-33195

creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:04+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mhrepxot2s2u 2026-03-24 03:21:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrmndre452i 2026-03-24 07:51:46+00:00| seen|...

CVE-2026-33228

creationtimestamp| type| source ---|---|--- 2026-03-21 00:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjsg2wts22n 2026-03-23 21:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqxdpvch62s...

CVE-2026-2682 Tsinghua Unigroup Electronic Archives System prinReport.html sql injection

A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.21080262532. Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The...

CVE-2025-57794

creationtimestamp| type| source ---|---|--- 2026-01-28 19:13:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiy6by3pm2c 2026-01-28 20:06:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj35ydj7s2v 2026-01-28 20:07:36+00:00| seen|...

Arbitrary File Read via Log Symlink following in FileTaskHandler

This report is not public...

Job API exposed without authorization

This report is not public...

MLflow SageMaker Command Injection Vulnerability

Description The vulnerability exists in /mlflow/sagemaker/init.py at lines 161-167, where user-supplied container image names are directly interpolated into shell commands without proper sanitization before being passed to os.system. Vulnerable Code Path : CLI Input --container parameter ↓...

Unlimited-memory decompression leads to DoS bypassing `--http-max-input-size`

This report is not public...

Remote code execution via transformers_utils/get_config

This report is not public...

CVE-2025-59304

creationtimestamp| type| source ---|---|--- 2025-09-17 19:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz2k4khdxx2c...

CVE-2025-20340

creationtimestamp| type| source ---|---|--- 2025-09-10 16:34:51+00:00| seen| https://gist.github.com/Darkcrai86/742739fa2f51b468b662e79c03b11cb0 2025-09-11 15:21:11+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lyl2f5wckc2e 2025-09-15 00:42:38+00:00| seen|...

influencemap.org Cross Site Scripting vulnerability OBB-4047457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

beslist.be Cross Site Scripting vulnerability OBB-4042730

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vpsmalaysia.com.my Open Redirect vulnerability OBB-4042355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blackbeltgroup.net Cross Site Scripting vulnerability OBB-4041920

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cccmv.com Cross Site Scripting vulnerability OBB-4041908

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

babetko.rodinka.sk Cross Site Scripting vulnerability OBB-4041586

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...