CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

CVE-2026-42613

creationtimestamp| type| source ---|---|--- 2026-04-27 12:15:23+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-pxm6-mhxr-q4mj 2026-05-11 17:03:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqvvrpcy26 2026-05-11...

CVE-2026-25660

creationtimestamp| type| source ---|---|--- 2026-04-24 15:22:27+00:00| published-proof-of-concept| Telegram/lvQKk-ZCMh3Q3qpeojegtiwsEvYSJJ9oeMubqB3D8wrl-U 2026-04-25 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116464879334896806 2026-04-25 10:30:30+00:00| seen|...

CVE-2026-25262

creationtimestamp| type| source ---|---|--- 2026-04-24 14:30:06+00:00| seen| https://t.me/truesecator/8141 2026-04-24 15:35:55+00:00| seen| https://t.me/xakepru/19303 2026-05-06 00:21:12+00:00| seen| https://notnow.dev/objects/cb0f51ab-513a-484f-8edd-624c60fcf616 2026-06-22 18:20:54+00:00| seen|...

CVE-2026-41342

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...

EUVD-2026-25284

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mass assignment JSON injection vulnerability in the account registration endpoint of Flowise Cloud allows unauthenticated attackers to inject server-managed fields and nested objec...

CVE-2025-13826

creationtimestamp| type| source ---|---|--- 2026-04-21 10:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjyt226zkl2e 2026-04-21 10:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjyt3xbero2n 2026-04-21 11:16:33+00:00| published-proof-of-concept|...

CVE-2026-5964

creationtimestamp| type| source ---|---|--- 2026-04-20 09:17:22+00:00| seen| Telegram/Lm9dzPhVRFRRMgyzsUGG1X5A2Qj2Q71JCDe8XQUe2-0mpLw 2026-04-20 10:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwajrev3a2t 2026-04-20 10:34:39+00:00| seen|...

CVE-2026-6603

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 08:19:27+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3mjvzuaeas22y 2026-04-20 08:19:27+00:00| seen|...

CVE-2026-6574

creationtimestamp| type| source ---|---|--- 2026-04-19 15:00:14+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mju7sa6ety2v 2026-04-19 15:00:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116431966121032331 2026-04-19 15:15:14+00:00| seen|...

CVE-2026-40492

creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc 2026-04-18 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqpx4bamu26 2026-04-18 06:00:28+00:00| seen|...

CVE-2026-27890

creationtimestamp| type| source ---|---|--- 2026-04-17 20:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjppngjaeg26 2026-04-17 21:22:32+00:00| seen| Telegram/1afGr9vW06Zk0J3YeUW4MdlUf8TA53EPyuLeVgpLZqfvxp8 2026-04-17 21:38:56+00:00| seen|...

CVE-2025-36568

creationtimestamp| type| source ---|---|--- 2026-04-17 10:55:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjor6crze62f 2026-04-17 11:11:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjos2lv65s26 2026-04-17 11:17:26+00:00| seen|...

CVE-2026-23775

creationtimestamp| type| source ---|---|--- 2026-04-17 10:20:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoparma452f 2026-04-17 11:11:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjos2sg6nb27 2026-04-17 11:17:26+00:00| seen|...

GHSA-JP74-MFRX-3QVH Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)

Summary A critical SQL injection vulnerability in Saltcorn’s mobile-sync routes allows any authenticated low-privilege user with read access to at least one table to inject arbitrary SQL through sync parameters. This can lead to full database exfiltration, including admin password hashes and...

CVE-2026-6388

creationtimestamp| type| source ---|---|--- 2026-04-15 23:27:35+00:00| seen| Telegram/ajbOyvFAewWZ2L70l5GRQuj2wRnDYaN4zfpEHfJh7NMuY 2026-04-16 00:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjl72wjbmn2z 2026-04-16 01:30:30+00:00| seen|...

CVE-2026-6349

creationtimestamp| type| source ---|---|--- 2026-04-15 18:44:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10841-4f504-2.html 2026-04-16 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116412503035182529 2026-04-16 05:03:26+00:00| seen|...

CVE-2026-1555

creationtimestamp| type| source ---|---|--- 2026-04-15 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjj2qkoar62p 2026-04-15 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116406840802962869 2026-04-15 05:06:37+00:00| seen|...

CVE-2026-32198

creationtimestamp| type| source ---|---|--- 2026-04-14 12:20:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0116 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 19:38:44+00:00| seen|...

CVE-2026-40038

creationtimestamp| type| source ---|---|--- 2026-04-13 20:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfppdsytf2m 2026-04-13 21:22:40+00:00| seen| Telegram/c7uZKOPwVy2hcS0GAJgtvZD1v9yKI-NyzhYNMP5jQugHxE 2026-04-13 21:43:24+00:00| seen|...