CVE-2026-35667

creationtimestamp| type| source ---|---|--- 2026-04-10 18:33:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xju2hzy2o...

EUVD-2026-21384

CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the fklevelslist parameter in user creation requests. Attackers can modify the parameter value from 4 to 10 in the HTTP request body to bypass...

CVE-2012-2459

creationtimestamp| type| source ---|---|--- 2026-04-10 18:26:02+00:00| seen| https://gist.github.com/motolese/14f6c5a8151e9fb449829e58444e63c4 2026-04-10 23:21:37+00:00| seen| https://gist.github.com/motolese/79baccbf5bcc258810124ab8d463e52a 2026-06-12 17:01:32+00:00| seen|...

CVE-2026-35664

creationtimestamp| type| source ---|---|--- 2026-04-10 18:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5wqyntnc2z...

CVE-2026-41679

creationtimestamp| type| source ---|---|--- 2026-04-10 16:50:27+00:00| published-proof-of-concept| https://github.com/paperclipai/paperclip/security/advisories/GHSA-68qg-g8mg-6pr7 2026-04-23 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116451431450772018 2026-04-23...

CVE-2026-40217

creationtimestamp| type| source ---|---|--- 2026-04-10 15:17:37+00:00| seen| Telegram/BHjpIBo0iRlJvCTjCc1tWATK3ONpTPYFFDHwGYF-bIOT41U 2026-04-10 15:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5nnyqjgd2j 2026-04-11 10:00:21+00:00| seen|...

GHSA-2WGG-7R2P-CMQX

creationtimestamp| type| source ---|---|--- 2026-04-10 15:17:16+00:00| seen| Telegram/lguE38htKCDsrEIHzbRJLgqsKSDV6aHHtfYRxKZkwP2V8...

CVE-2025-5804

creationtimestamp| type| source ---|---|--- 2026-04-10 14:36:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5kbm5uqb2d 2026-04-10 15:17:16+00:00| seen| Telegram/lguE38htKCDsrEIHzbRJLgqsKSDV6aHHtfYRxKZkwP2V8 2026-04-10 15:17:37+00:00| seen|...

CVE-2026-5525

creationtimestamp| type| source ---|---|--- 2026-04-10 10:06:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj535ug5a42j...

CVE-2026-6026

creationtimestamp| type| source ---|---|--- 2026-04-10 07:17:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rrch34w2m 2026-04-10 08:57:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4xdzoraq2i 2026-04-10 09:17:31+00:00| seen|...

CVE-2026-6010

creationtimestamp| type| source ---|---|--- 2026-04-10 06:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4pzqusti24...

CVE-2026-6016

creationtimestamp| type| source ---|---|--- 2026-04-10 06:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4nkszciy2n 2026-04-10 07:17:31+00:00| seen| Telegram/YruiPCCDRz2vyflfBMlP818JP0JqeQaxKae5Lp6AxYseU 2026-04-10 07:19:32+00:00| seen|...

CVE-2026-5501

creationtimestamp| type| source ---|---|--- 2026-04-10 04:47:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4jem5j6g2n 2026-04-10 05:15:56+00:00| published-proof-of-concept| Telegram/1WdkdhXUJmGV7ePrqgJjIpgxUFBJfkFq-ncP6HWfcjVt70 2026-06-23 08:23:37+00:00| seen|...

CVE-2026-33551

An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role...

CVE-2026-29861

creationtimestamp| type| source ---|---|--- 2026-04-10 03:00:04+00:00| seen| https://t.me/GithubRedTeam/79673...

CVE-2026-4057

creationtimestamp| type| source ---|---|--- 2026-04-10 02:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4aebbuw32s 2026-04-19 13:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mju2whq7ln2s...

CVE-2026-1924

creationtimestamp| type| source ---|---|--- 2026-04-10 02:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4aaogmjc2s 2026-04-10 07:44:20+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mj4tailig62r 2026-04-19 21:33:06+00:00| seen|...

CVE-2026-5989

creationtimestamp| type| source ---|---|--- 2026-04-10 01:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj44ymxfzy2i 2026-04-10 01:19:02+00:00| seen| Telegram/r2aLRB54IhOSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8 2026-04-30 23:37:14+00:00| seen|...

GHSA-PMF3-2Q63-JMP6 Duplicate Advisory: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7xr2-q9vf-x4r5. This link is maintained to preserve external references. Original Description OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers tha...

Chamilo LMS 安全特征问题漏洞

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Versions of Chamilo LMS prior to 1.11.38 and 2.0.0-RC.3 contained security vulnerabilities. These vulnerabilitie...