CVE-2026-7504

creationtimestamp| type| source ---|---|--- 2026-05-19 12:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gy7dnug2e 2026-05-19 13:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7hkblcqz2t 2026-06-01 11:03:09+00:00| seen|...

CVE-2026-8827

creationtimestamp| type| source ---|---|--- 2026-05-19 12:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gotmhok2k 2026-05-19 13:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7h5lczbw2e...

CVE-2026-41054

creationtimestamp| type| source ---|---|--- 2026-05-19 12:47:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7gf7pxbp2e 2026-05-19 14:02:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7klht65r2b 2026-05-20 00:38:39+00:00| seen|...

Exploit for CVE-2026-42945

CVE-2026-42945 PoC Go This tool is designed for detecting a...

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC. "The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hours or days," the...

CVE-2026-45434

creationtimestamp| type| source ---|---|--- 2026-05-19 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116600774685376629 2026-05-19 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j 2026-05-19 17:49:26+00:00| seen|...

Exploit for Type Confusion in Apple Safari

CVE-2024-23222 — WebKit Type Confusion → iOS 16.4.1 Sandbox Es...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.9.4

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.9.4 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.9.4 release that simplify the process of...

CVE-2026-4858

creationtimestamp| type| source ---|---|--- 2026-05-19 00:51:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-mattermost 2026-05-21 12:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmeep2dusz2k 2026-05-21 13:09:09+00:00| seen|...

Detecting Data Exfiltration through I2P Anonymity Networks: A Two-Phase Machine Learning Approach

The Invisible Internet Project I2P provides strong anonymity through garlic routing and distributed network architecture, making it attractive for legitimate privacy needs. Nevertheless, the same properties can be exploited by malicious actors to steal sensitive information from corporate network...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

PT-2026-41946

Name of the Vulnerable Software and Affected Versions hitarth-gg Zenshin versions prior to 2.7.0 Description An OS command injection flaw exists in the '/stream-to-vlc' Express route. This allows remote attackers to execute arbitrary commands on the host operating system by manipulating the url...

EUVD-2026-30950

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

CVE-2026-37281

The hitarth-gg Zenshin media streaming tool (versions prior to 2.7.0 ) is vulnerable to an OS command injection flaw within the /stream-to-vlc Express route. Remote attackers can exploit this by manipulating the url parameter to execute arbitrary commands on the host operating system. To remediat...

KiTTY buffer error vulnerability

KiTTY is a lightweight telnet and WindowsSSH client. Versions of Kitty 0.46.2 and earlier contained a buffer error vulnerability, which was caused by an unsigned 32-bit arithmetic integer overflow in handlecomposecommand. This overflow led to excessive reading or writing operations of the heap...

ALSA-2026:19143 Moderate: libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

FreeBSD : Vinyl/Varnish -- HTTP/2 parsing deficiency (f0f4bb64-52c6-11f1-a1c0-0050569f0b83)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f0f4bb64-52c6-11f1-a1c0-0050569f0b83 advisory. Vinyl Development Team reports: A deficiency in HTTP/2 request parsing can be exploited to launch a...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20743-1 Rating: important References: bsc1264449 bsc1264450 Cross-References: CVE-2026-43284 CVE-2026-43500 CVSS scores: CVE-2026-43284 SU...

Security update for rsync (important)

openSUSE security update: security update for rsync ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20754-1 Rating: important References: bsc1254441 bsc1262223 Cross-References: CVE-2025-10158 CVE-2026-41035 CVSS scores: CVE-2025-10158 SUSE : 4.3...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20762-1 Rating: important References: bsc1170826 bsc1255111 bsc1264499 bsc1264500 bsc1264501 bsc1264502 bsc1264503 bsc1264504 bsc1264505 bsc1264506...