CVE-2026-32991

creationtimestamp| type| source ---|---|--- 2026-05-14 02:46:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrsgkjgte2e 2026-05-20 06:20:46+00:00| seen| https://www.acn.gov.it/portale/w/cpanel-whm-e-wp-squared-poc-pubblico-per-lo-sfruttamento-della-cve-2026-29205...

CVE-2024-36315

creationtimestamp| type| source ---|---|--- 2026-05-13 05:40:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlplq44z6g2i...

CVE-2026-4301

creationtimestamp| type| source ---|---|--- 2026-05-12 22:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlott7s6ly2i...

Out-of-bounds Read

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Out-of-bounds Read in the input validation process. An attacker can gain unauthorized write access by tricking a user with high privileges into visiting a maliciously craft...

CVE-2026-41293

creationtimestamp| type| source ---|---|--- 2026-05-12 17:15:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mloc2ajsvu2j 2026-07-09 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqapsxsqnv25...

CVE-2025-40949

creationtimestamp| type| source ---|---|--- 2026-05-12 12:19:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnrjhsgsn2g 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-12 2026-07-17 13:07:38+00:00| seen|...

CVE-2026-27682 Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)

Due to a reflected cross-site scripting XSS vulnerability in SAP NetWeaver Application Server ABAP Applications based on Business Server Pages, an unauthenticated attacker could craft a URL that exploits an unprotected URL parameter to embed a malicious script. If a victim clicks the link, the...

CVE-2026-8249

creationtimestamp| type| source ---|---|--- 2026-05-11 03:10:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkcfnm5d72k...

CVE-2026-8261

creationtimestamp| type| source ---|---|--- 2026-05-11 02:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkbrc3fdr2e...

CVE-2026-8195

creationtimestamp| type| source ---|---|--- 2026-05-09 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhalbqgdr2e...

EUVD-2025-209754

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

EUVD-2026-28851

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the sftp:// or file:// protocol handlers, an attacker can execute arbitrary...

CVE-2026-44335

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...

CVE-2026-8128

creationtimestamp| type| source ---|---|--- 2026-05-08 05:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcyrq4mm42k...

CVE-2026-39820

creationtimestamp| type| source ---|---|--- 2026-05-07 21:36:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc6cr7gqp2e 2026-05-08 12:01:06+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldongyk2c2y 2026-05-15 12:01:12+00:00| seen|...

CVE-2026-40108

creationtimestamp| type| source ---|---|--- 2026-05-07 16:00:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-06-02 13:45:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4nolce2y 2026-06-03 01:30:27+00:00| seen|...

CVE-2026-20189

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit...

CVE-2026-43276

creationtimestamp| type| source ---|---|--- 2026-05-06 14:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ve2dwo32p 2026-07-09 00:45:19+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702...

GHSA-62HF-57XW-28J9

creationtimestamp| type| source ---|---|--- 2026-05-05 02:10:29+00:00| seen| https://gist.github.com/alon710/80e5845ba30ef0e257e4add1fe792629...

CVE-2026-24118

creationtimestamp| type| source ---|---|--- 2026-05-04 16:40:28+00:00| seen| https://gist.github.com/alon710/e818aa393dda5bd140273420e0cde714 2026-05-04 18:30:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckcncdj2k 2026-05-08 21:37:07+00:00| seen|...