CVE-2026-41669

creationtimestamp| type| source ---|---|--- 2026-05-07 04:58:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlagko3g752n 2026-05-07 07:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlap55q4jn2i...

GHSA-375F-4R2H-F99J

creationtimestamp| type| source ---|---|--- 2026-05-07 04:40:29+00:00| seen| https://gist.github.com/alon710/4ff6ed1a1dcb2ad425666d3faacd2bcb...

CVE-2016-7883

creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:09+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep7byzq2p...

CVE-2016-2212

creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:08+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep6hrzw2q...

CVE-2015-2067

creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:06+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep4xqlu2u...

GHSA-Q6V9-R226-V65F

creationtimestamp| type| source ---|---|--- 2026-05-07 04:10:29+00:00| seen| https://gist.github.com/alon710/60dab51279f6b991c4df239e6fd329b2...

GHSA-MMPX-JH39-WRV6

creationtimestamp| type| source ---|---|--- 2026-05-07 03:40:29+00:00| seen| https://gist.github.com/alon710/14822427e82604da5dce18ab5080ddb7...

CVE-2026-3291

creationtimestamp| type| source ---|---|--- 2026-05-07 02:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla5b7ww3i2p...

GHSA-FC67-C4HG-Q653

creationtimestamp| type| source ---|---|--- 2026-05-07 01:40:29+00:00| seen| https://gist.github.com/alon710/685bd82e2bb849307786205498652c75...

CVE-2026-42083

creationtimestamp| type| source ---|---|--- 2026-05-07 01:15:21+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-6rgm-gr97-x3j5 2026-05-07 01:58:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6rgm-gr97-x3j5 2026-05-29...

Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist

Summary The ExifTool metadata write blocklist in Gotenberg v8 can be bypassed using ExifTool's group-prefix syntax, enabling arbitrary file rename, move, hardlink, and symlink creation on the server. This is a bypass of the fix for GHSA-qmwh-9m9c-h36m. Details The blocklist in...

GHSA-7V3R-M9C8-R855 Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist

Summary The ExifTool metadata write blocklist in Gotenberg v8 can be bypassed using ExifTool's group-prefix syntax, enabling arbitrary file rename, move, hardlink, and symlink creation on the server. This is a bypass of the fix for GHSA-qmwh-9m9c-h36m. Details The blocklist in...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the handling of index rollover requests when an explicit target index name is provided. An attacker can create a new index with an unauthorized name by exploiting insufficient access control checks on the targ...

GHSA-22VX-2X23-98W6 OpenSearch vulnerable to improper authorization for Rollover Requests

Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a rollover request included an explicit target index name, the security plugin did not properly evaluate access control permissions against the target index. This could allow a user wit...

CVE-2026-40076

creationtimestamp| type| source ---|---|--- 2026-05-07 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116530350683018033 2026-05-07 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml7vwe264u2v 2026-05-07 01:43:26+00:00| seen|...

Webkul Krayin CRM 跨站脚本漏洞

Webkul Krayin CRM is a free and open-source CRM solution for small and medium-sized businesses developed by the Indian company Webkul. Version 2.1.5 of Webkul Krayin CRM contains a cross-site scripting vulnerability. This vulnerability arises from the lack of cleanup of user input during the...

CVE-2026-36341

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...

GitHub Enterprise Server 访问控制错误漏洞

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was an access control...

CVE-2026-36341

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...

CVE-2026-36341

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint...