CVE-2026-0894

creationtimestamp| type| source ---|---|--- 2026-04-18 21:18:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116427790167391020 2026-04-20 06:28:01+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mjvtn7c7pf2a...

Exploit for CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps = 3.28.20 - Un...

Exploit for CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 -...

CVE-2026-41253

creationtimestamp| type| source ---|---|--- 2026-04-18 08:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqzg6uaxw2k...

CVE-2026-40490

creationtimestamp| type| source ---|---|--- 2026-04-18 05:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqqiz4c7y2f...

CVE-2026-40492

creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc 2026-04-18 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqpx4bamu26 2026-04-18 06:00:28+00:00| seen|...

GHSA-CP2J-RWH4-R46F

creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc...

CVE-2026-40493

creationtimestamp| type| source ---|---|--- 2026-04-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423827633920562 2026-04-18 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqm5bpu762l 2026-04-18 05:18:34+00:00| published-proof-of-concept|...

GHSA-44WG-R34Q-HVFX

creationtimestamp| type| source ---|---|--- 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk...

CVE-2026-40483

creationtimestamp| type| source ---|---|--- 2026-04-18 02:28:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqfcaa6a62f...

CVE-2026-40572

creationtimestamp| type| source ---|---|--- 2026-04-18 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423119797929424 2026-04-18 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqc3fc2ov2p 2026-04-18 03:16:44+00:00| published-proof-of-concept|...

CVE-2026-40335

creationtimestamp| type| source ---|---|--- 2026-04-18 01:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqbxr4qcm23...

CVE-2026-40480

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 01:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqd3qgtig2f...

GHSA-5W59-32C8-933V

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE...

GHSA-QR3M-XW4C-JQW3

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:04+00:00| published-proof-of-concept| Telegram/u5f3Gra6Haipf3VJEB4yu-gwc95-0FLxvYnhbIvKSTo7fn8...

GHSA-V7XQ-3WX6-FQC2

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:04+00:00| published-proof-of-concept| Telegram/u5f3Gra6Haipf3VJEB4yu-gwc95-0FLxvYnhbIvKSTo7fn8...

Wish has SCP Path Traversal that allows arbitrary file read/write

Summary The SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A malicious SCP client can read arbitrary files from the server, write arbitrary files to the server, and create directories outside the configured root directory by sending crafted filenames containing ../...

CVE-2026-40350

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints /settings/users and use them to enumerate all users and create a new administrator account. This happens because the route...

CVE-2026-40350 Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints /settings/users and use them to enumerate all users and create a new administrator account. This happens because the route...

CVE-2026-40350 Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints /settings/users and use them to enumerate all users and create a new administrator account. This happens because the route...