CVE-2026-39110

creationtimestamp| type| source ---|---|--- 2026-04-20 20:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb33hgis2l...

CVE-2026-23756

creationtimestamp| type| source ---|---|--- 2026-04-20 19:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx7sl7cmh2p...

CVE-2026-41305

creationtimestamp| type| source ---|---|--- 2026-04-20 19:34:55+00:00| published-proof-of-concept| https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93 2026-05-25 10:59:12+00:00| seen| https://gist.github.com/konard/e42a66222e8be69e82eda8e4c8a6c943...

CVE-2026-6573

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely...

CVE-2026-40525

OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the apikey configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke...

CVE-2026-40350

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints /settings/users and use them to enumerate all users and create a new administrator account. This happens because the route...

CVE-2026-34941

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY...

GHSA-436G-FHFC-9G5W

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:48+00:00| seen| Telegram/KXW7G8PyXXZwX9Od1pYkShAhyWITcXi61d9qyY3YKOVjQs...

CVE-2026-42199

creationtimestamp| type| source ---|---|--- 2026-04-20 18:42:12+00:00| published-proof-of-concept| https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp 2026-05-08 22:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlesrz5rvk2i...

EUVD-2026-23926

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated administrators to inject arbitrary JavaScript by manipulating the companyname POST parameter without HTML sanitization. Attackers can...

CVE-2026-40488

creationtimestamp| type| source ---|---|--- 2026-04-20 18:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx3erpisl2k 2026-04-20 21:21:58+00:00| seen| Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9P4HVJMq4o 2026-04-21 00:04:04+00:00| seen|...

CVE-2026-23757

GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFTReport::Create without HTML sanitization. Attackers can inject arbitrary JavaScript into the report title field when creating or editing a...

CVE-2026-24467

creationtimestamp| type| source ---|---|--- 2026-04-20 17:21:45+00:00| seen| Telegram/7kKxZY5KjVtNNq82uAZn6qPfMFkWsKJQXsAec31tFmY88 2026-04-20 18:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx2srud322i 2026-04-20 18:50:23+00:00| seen|...

CVE-2026-23774

creationtimestamp| type| source ---|---|--- 2026-04-20 17:21:45+00:00| seen| Telegram/7kKxZY5KjVtNNq82uAZn6qPfMFkWsKJQXsAec31tFmY88 2026-04-20 21:44:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjxgudvxve2o...

GHSA-M9J7-JW3M-FR22

creationtimestamp| type| source ---|---|--- 2026-04-20 17:20:51+00:00| seen| Telegram/GfeUhnyJYShCjvs7rm1XQAQJnKqowYjnl2h2DVxLAV4-eNA...

CVE-2026-39918

creationtimestamp| type| source ---|---|--- 2026-04-20 16:31:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwvf6udne2i 2026-04-20 17:22:08+00:00| seen| Telegram/-Vy2XQ2z07jYi2wcd9u4WdI0Jz8Ty9lZ08uUeDLxVO8eZvU 2026-04-20 18:48:12+00:00| seen|...

CVE-2026-39861

creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39861 2026-04-21 02:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxxg2owzt2o 2026-04-21 03:18:04+00:00| seen|...

CVE-2026-39946

creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39946 2026-04-21 02:29:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxwrdssuw2e...

CVE-2018-25208

creationtimestamp| type| source ---|---|--- 2026-04-20 15:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjwqnj4a5b2v...

CVE-2026-6630

creationtimestamp| type| source ---|---|--- 2026-04-20 12:25:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwhlzf3kt2k 2026-04-20 13:16:52+00:00| published-proof-of-concept| Telegram/7GNSW27Y2N6zMsJzLht94-sDuqQRdO09nNnVciVhTSt0Y 2026-04-20 13:22:21+00:00| seen|...