CVE-2026-6257

creationtimestamp| type| source ---|---|--- 2026-04-20 20:23:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxccsfnrj2q 2026-04-20 21:22:19+00:00| published-proof-of-concept| Telegram/OLcxrKJ5zAhCDZ5T6GCelVBzr2kWns3QejwnSLKnpZyw 2026-04-21 01:30:30+00:00| seen|...

CVE-2099-0001

creationtimestamp| type| source ---|---|--- 2026-04-20 07:08:11+00:00| seen| https://gist.github.com/KursatBB/7be1e57b5ab50dc717e7c8d1372da337...

CVE-2026-6451

creationtimestamp| type| source ---|---|--- 2026-04-17 10:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjopm4miod2k 2026-04-17 12:32:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjowljd7yw2n...

The vulnerability of the SAP NetWeaver AS ABAP software integration platform lies in the redirection of URLs to unreliable websites, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the SAP NetWeaver AS ABAP software integration platform is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...

Important: containerd

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...

CVE-2026-3865

creationtimestamp| type| source ---|---|--- 2026-04-11 01:40:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6petqw242e 2026-04-13 12:56:04+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3mjew2p3csl2a 2026-04-13 15:06:04+00:00| seen|...

CVE-2026-35667

creationtimestamp| type| source ---|---|--- 2026-04-10 18:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xju2hzy2o...

CVE-2026-25013

creationtimestamp| type| source ---|---|--- 2026-04-09 10:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2lzzujah2u...

LimeSurvey 安全漏洞

LimeSurvey PHPSurveyor is a set of open-source online survey programs developed by the LimeSurvey team. It supports functions such as survey program development, survey questionnaire publishing, and data collection. Version 6.15.20+251021 of Limesurvey contains a security vulnerability, which ste...

CVE-2024-7434

creationtimestamp| type| source ---|---|--- 2026-04-08 23:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mizgm2bs4j2c...

CVE-2026-34837

creationtimestamp| type| source ---|---|--- 2026-04-08 21:41:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizb4fb2tj2d...

CVE-2024-3018

creationtimestamp| type| source ---|---|--- 2026-04-08 19:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miz2cnxw7i2r...

CVE-2026-32527

creationtimestamp| type| source ---|---|--- 2026-04-08 05:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mixkspkerd2b...

CVE-2026-35409

creationtimestamp| type| source ---|---|--- 2026-04-06 22:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubr544fh2j 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:20:37+00:00| seen|...

CVE-2026-4820

IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to th...

CVE-2026-29139

creationtimestamp| type| source ---|---|--- 2026-04-02 10:21:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiyc7ndm32q 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI...

CVE-2026-29014

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 15:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migyydiyl327 2026-04-01 16:29:53+00:00| seen|...

CVE-2026-30526

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0 . The flaw is located in the login page within the msg parameter , where the application reflects user input without proper HTML encoding or sanitization . This allows a remote attacker to inj...

CVE-2026-5180

creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:33+00:00| published-proof-of-concept| Telegram/1iWaApiUM0jOADSkCxbAhXY3iS1qKmB0s9RsJgnPCTY34SA 2026-03-31 07:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midoe6pofu2o...

CVE-2026-4996

creationtimestamp| type| source ---|---|--- 2026-03-28 13:15:28+00:00| published-proof-of-concept| Telegram/br59VXTdsrXIjQrxmwmULmHR5vTzBCK926-05m5zFA5U4A 2026-03-28 15:19:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4wmiajg725...