CVE-2025-31984

creationtimestamp| type| source ---|---|--- 2026-05-06 18:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7d5nyctn2r...

NPM: dssrf: every IPv6 category bypasses is_url_safe

NPM: dssrf: every IPv6 category bypasses isurlsafe vulnerability discovered by ? in WordPress Npm dssrf versions 1.3.0...

Incomplete Filtering of Special Elements

Overview dssrf is a SSRF defense library for Node.js with safe URL validation utilities. Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements via the isurlsafe function. An attacker can access internal network resources by supplying specially crafted IPv6...

CVE-2025-31976

creationtimestamp| type| source ---|---|--- 2026-05-06 17:58:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7bo6pcnu2p...

CVE-2025-52613

creationtimestamp| type| source ---|---|--- 2026-05-06 17:47:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7b3b43772i...

CVE-2025-31959

creationtimestamp| type| source ---|---|--- 2026-05-06 17:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aelzoe42h...

CVE-2026-43278

creationtimestamp| type| source ---|---|--- 2026-05-06 17:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528795236956577 2026-05-07 11:52:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116533148086350826 2026-07-02 06:18:13+00:00| seen|...

GHSA-Q4W7-56HR-83RM

creationtimestamp| type| source ---|---|--- 2026-05-06 17:10:29+00:00| seen| https://gist.github.com/alon710/8f2a8c09229ab2a61f27e4872d065fac...

CVE-2026-43273

creationtimestamp| type| source ---|---|--- 2026-05-06 14:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6vr2jybz2e 2026-07-02 06:18:07+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:57+00:00| seen...

CVE-2026-43275

creationtimestamp| type| source ---|---|--- 2026-05-06 14:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uqtt57u2p 2026-07-02 06:18:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:59+00:00| seen...

CVE-2026-43266

creationtimestamp| type| source ---|---|--- 2026-05-06 14:00:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ufxscao2t 2026-07-02 06:17:56+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:52:36+00:00| seen...

CVE-2026-44985

creationtimestamp| type| source ---|---|--- 2026-05-06 12:29:00+00:00| published-proof-of-concept| https://github.com/amir20/dozzle/security/advisories/GHSA-j643-x8pv-8m67 2026-05-27 01:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd3b27g32n 2026-06-22 00:32:33+00:00| see...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-23928

creationtimestamp| type| source ---|---|--- 2026-05-06 10:31:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iq6wlim2r 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...

CVE-2026-35254

creationtimestamp| type| source ---|---|--- 2026-05-06 10:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hmax7f32r...

CVE-2026-43077

creationtimestamp| type| source ---|---|--- 2026-05-06 09:59:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527041500918607 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00|...

CVE-2026-7332

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-6344

The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1. This is due to insufficient path validation in the getAttachments method of EmailNotificationActions, which resolves attacker-supplied file-upload URLs into filesystem paths without...

CVE-2026-7332

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-7332 LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingformpageurl' parameter in all versions up to, and including, 5.5.0 due to insufficient input sanitization and output escaping. This makes it possib...