GHSA-2RCC-JG83-34VP

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...

GHSA-5RM9-893Q-VMHM

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...

CVE-2026-35201

creationtimestamp| type| source ---|---|--- 2026-04-04 00:16:27+00:00| published-proof-of-concept| https://github.com/davidfstr/rdiscount/security/advisories/GHSA-6r34-94wq-jhrc 2026-04-17 12:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjoxcsml6d2r...

CVE-2026-34229

creationtimestamp| type| source ---|---|--- 2026-04-04 00:09:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwzpv5eq2i...

CVE-2026-34933

creationtimestamp| type| source ---|---|--- 2026-04-04 00:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwkmfdjp2q 2026-04-11 17:30:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjaehb4uhn2d 2026-04-14 13:10:07+00:00| seen|...

MyBB 跨站脚本漏洞

MyBB MyBulletinBoard is a free, web-based forum software developed by the MyBB team using PHP and MySQL. This software features simplicity in use, support for multiple languages, and scalability. MyBB has a cross-site scripting vulnerability; this vulnerability arises from improper cleaning of...

MyBB Like Plugin 跨站脚本漏洞

MyBB Like Plugin is an extension for forums developed by MyBB Corporation. Version 3.0.0 of MyBB Like Plugin contains a cross-site scripting vulnerability. This vulnerability arises from the lack of validation of topic content when posts or topics are created, which may allow attackers to inject...

PT-2026-30379

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user manipulate and admin/settings/generall endpoints to...

CVE-2026-28797

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:37+00:00| published-proof-of-concept| Telegram/CEl2HN4MrzqJMXyxgw87k5eg4RsD4Gdp10Ib2zQOK7Dk 2026-04-03 23:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimvgajrpe23 2026-04-07 07:00:16+00:00| seen|...

CVE-2026-22665

creationtimestamp| type| source ---|---|--- 2026-04-03 22:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mims3hv75b2i 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 05:01:02+00:00| seen|...

EUVD-2026-18909

Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service...

GHSA-3JR7-6HQP-X679 Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service

Summary An uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to threa...

Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service

Summary An uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to threa...

CVE-2026-34211

creationtimestamp| type| source ---|---|--- 2026-04-03 21:45:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8pfc-jjgw-6g26 2026-04-07 17:28:27+00:00| seen| Telegram/JtakylbYKAfJvCRBIgmgtreOTLAC-UR5YdC-v7gW7NnsM 2026-04-11 09:34:25+00:00| seen|...

Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity

Summary According to SignalK's security documentation, when a server is first initialized without security enabled, the /skServer/enableSecurity endpoint is intentionally exposed to allow the owner to set up the initial admin account. This initial open access is by design. However, the critical...

CVE-2026-34990

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That...

CVE-2026-0545

creationtimestamp| type| source ---|---|--- 2026-04-03 18:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimfityqht2i 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss 2026-04-04 06:00:22+00:00| seen|...

CVE-2026-23436

A flaw was found in the Linux kernel's network shaper module. A race condition can occur when a network device netdev is unregistered while its hierarchy is being created. This timing issue may allow the system to allocate resources that are not properly released, leading to a memory leak...

CVE-2026-35218

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc 2026-04-03 18:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimenycbpv2i 2026-04-04 06:17:29+00:00| seen|...

CVE-2026-35216

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc 2026-04-03 18:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimewx5ekf2g 2026-04-04 06:17:22+00:00| seen|...