GHSA-7WW3-XVF5-CXWM

creationtimestamp| type| source ---|---|--- 2026-05-06 03:10:29+00:00| seen| https://gist.github.com/alon710/1d05503905d86d5b6619223d3f318c59...

CVE-2025-71252

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5pkzx226 2026-05-06 05:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5xronng72o 2026-06-01 18:00:00+00:00| seen|...

CVE-2025-71255

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5c2ntm2w 2026-05-06 05:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5zaf5wiv2i 2026-06-01 18:00:00+00:00| seen|...

SUSE CVE-2026-43013

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs mlx5lagdevaddmdev may return 0 success even when an error occurs that is handled gracefully. Consequently, the initialization flow proceeds to call mlx5ldevadddebugfs ev...

PT-2026-38294

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.48 Description Insufficient validation of reference paths in reference creation, rename, and delete operations allows attackers to write, overwrite, move, or delete files outside the repository's .git directory...

RHCOS 4 : OpenShift Container Platform 4.7.38 (RHSA-2021:4801)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4801 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...

PT-2026-38229

Name of the Vulnerable Software and Affected Versions Masa CMS versions prior to 7.2.10 Masa CMS versions prior to 7.3.15 Masa CMS versions prior to 7.4.10 Masa CMS versions prior to 7.5.3 Description The createBundle function in csettings.cfc fails to properly validate anti-CSRF Cross-Site Reque...

WordPress plugin Ninja Tables – Easy Data Table Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-4061

creationtimestamp| type| source ---|---|--- 2026-05-05 23:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5dw2bfnu2a...

Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component

Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write ZERO-DAY Unauthenticated Path Traversal leading to Arbitrary Directory Creation and Configuration Injection Summary Grav CMS v1.7.49.5 and latest development source is vulnerable to a Zero-Day Path Traversal...

Improper Enforcement of a Single, Unique Action

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Enforcement of a Single, Unique Action through the user creation process. An attacker can remove administrative privileges and disrup...

CVE-2026-33975

creationtimestamp| type| source ---|---|--- 2026-05-05 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52mdhzw52p...

CVE-2026-34464

creationtimestamp| type| source ---|---|--- 2026-05-05 20:42:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52evk4bo2e 2026-05-06 05:36:40+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows...

GHSA-C2FV-2FMJ-9XRX

creationtimestamp| type| source ---|---|--- 2026-05-05 20:40:29+00:00| seen| https://gist.github.com/alon710/bda89e90af91af7f573f2d831677b6d7...

CVE-2026-6447

creationtimestamp| type| source ---|---|--- 2026-05-05 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml4zu7n7xy2x...

CVE-2026-23420

creationtimestamp| type| source ---|---|--- 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

GHSA-PXHG-7XR2-W7XG

creationtimestamp| type| source ---|---|--- 2026-05-05 19:10:28+00:00| seen| https://gist.github.com/alon710/b2bc5ba5f8df2172d7f1f2a079b556ec...

GHSA-HRCW-XC63-G29M PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

Summary The markdowntabletoimage tool accepts a caller-controlled path parameter and passes it directly to gethtmltableimage: python pptagent/mcpserver.py:127-143 def markdowntabletoimagemarkdowntable: str, path: str, css: str - str: """ Args: path str: The file path where the image will be saved...

EUVD-2026-27014

PPTAgent: Arbitrary File Write + Directory Creation via markdowntabletoimage...

PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image

Summary The markdowntabletoimage tool accepts a caller-controlled path parameter and passes it directly to gethtmltableimage: python pptagent/mcpserver.py:127-143 def markdowntabletoimagemarkdowntable: str, path: str, css: str - str: """ Args: path str: The file path where the image will be saved...