CVE-2026-7426

creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mko7cisnyw2n 2026-05-04 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkztt3kj2m2h...

CVE-2018-25307

creationtimestamp| type| source ---|---|--- 2026-04-29 21:34:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mko2ja5g4i2q...

Exploit for OS Command Injection in Kubeai

CVE-2026-34940 — OS Command Injection in KubeAI via Model URL...

CVE-2026-7289

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7099

creationtimestamp| type| source ---|---|--- 2026-04-29 19:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkntwktvnx2s...

CVE-2018-25304

Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler SEH chain exploitation. Attackers can craft a malicious URL file that, when imported through the File Import Import...

CVE-2018-25304 Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler SEH chain exploitation. Attackers can craft a malicious URL file that, when imported through the File Import Import...

CVE-2026-5161

creationtimestamp| type| source ---|---|--- 2026-04-29 16:31:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknjl225yv2k 2026-04-30 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqj32em5u2c...

CVE-2026-6849

creationtimestamp| type| source ---|---|--- 2026-04-29 16:26:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknjc3gzjv2v 2026-04-29 19:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrx7v2472w...

Jenkins GitHub Plugin has an XSS vulnerability

In Jenkins GitHub Plugin versions 1.46.0 and earlier, the JavaScript that validates the "GitHub hook trigger for GITScm polling" feature improperly processes the current job URL. This results in a stored cross-site scripting XSS vulnerability exploitable by non-anonymous attackers with Overall/Re...

GHSA-W22P-4X9F-486V Jenkins GitHub Plugin has an XSS vulnerability

In Jenkins GitHub Plugin versions 1.46.0 and earlier, the JavaScript that validates the "GitHub hook trigger for GITScm polling" feature improperly processes the current job URL. This results in a stored cross-site scripting XSS vulnerability exploitable by non-anonymous attackers with Overall/Re...

CVE-2026-42646

creationtimestamp| type| source ---|---|--- 2026-04-29 15:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknes2jicx2t 2026-05-01 01:57:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqzns2lab2t...

CVE-2026-42641

creationtimestamp| type| source ---|---|--- 2026-04-29 15:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknej3z3t22p...

CVE-2026-7288

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

CVE-2026-42648

creationtimestamp| type| source ---|---|--- 2026-04-29 14:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndbszbdj2q...

Important: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-42525

Jenkins Microsoft Entra ID previously Azure AD Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks...

CVE-2026-42522

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdead580c1aba and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials...

CVE-2026-42525

Jenkins Microsoft Entra ID previously Azure AD Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks...

CVE-2026-42525

Jenkins Microsoft Entra ID previously Azure AD Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks...