CVE-2026-4119

CVE-2026-4119 affects the WordPress plugin Create DB Tables (versions up to and including 1.2.1). The vulnerability arises from missing capability checks and nonce verification in admin_post hooks for creating and deleting tables, allowing any authenticated user (including Subscribers) to execute...

CVE-2026-6416

creationtimestamp| type| source ---|---|--- 2026-04-22 04:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2ovzzxx42q...

CVE-2026-41457

creationtimestamp| type| source ---|---|--- 2026-04-22 04:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2mtmcsed2i...

CVE-2026-40344

creationtimestamp| type| source ---|---|--- 2026-04-22 03:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2jhjnulk2q 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

CVE-2026-41131

creationtimestamp| type| source ---|---|--- 2026-04-22 02:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2idpwpez2t...

CVE-2026-41128

creationtimestamp| type| source ---|---|--- 2026-04-22 02:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2i2rinzz2i...

CVE-2026-40343

creationtimestamp| type| source ---|---|--- 2026-04-22 02:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2gcftelj2c 2026-04-22 02:15:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mk2gh34d43w2...

CVE-2017-20230

creationtimestamp| type| source ---|---|--- 2026-04-22 01:24:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk2dmksft72e 2026-04-22 01:29:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk2dvjwak62b 2026-04-22 16:15:34+00:00| seen|...

GHSA-3FPM-8RJR-V5MC

creationtimestamp| type| source ---|---|--- 2026-04-22 01:19:46+00:00| seen| Telegram/K73t--MeF8g6jG3bb2C-tygRugHSGj3gpQqllzPf61swe44...

CVE-2026-4821

creationtimestamp| type| source ---|---|--- 2026-04-22 01:19:03+00:00| seen| Telegram/zBPsvp7areyPvO2SEeKM1Qy-KxN79fyHXtde1OrDiJAWALw 2026-04-22 02:36:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2hmbqyle2c...

PT-2026-34508

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference or -n flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force overwrite mode was also enabled. Thi...

PT-2026-34424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs file system where the BTRFS ROOT ORPHAN CLEANUP bit is not set during subvolume creation in the create subvol function. This can lead to a race condition...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix NULL-ptr-deref in rxeqpdocleanup when socket create failed There is a null-ptr-dere...

Linux Distros Unpatched Vulnerability : CVE-2026-31519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: set BTRFSROOTORPHANCLEANUP during subvol create We have recently observed a number of subvolumes with broken dentries. ls-ing the parent dir looks like:...

PT-2026-34496

The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file creation. When the utility identifies a missing path, it later attempts creation using File::create, which internally uses O TRUNC. An attacker can exploit this window to create...

Linux Distros Unpatched Vulnerability : CVE-2026-35356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent...

PT-2026-34386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the tracing component occurs when boot-time trigger registration fails before the trigger-data cleanup kthread is created. If kthread creation fails, the system fails to drain...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability that stems from race conditions during file creation. This vulnerability could allow attackers to truncate existing files, resulting in permanent data loss...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from a logical error in the ln function. This vulnerability could allow local attackers to manipulate existing symbolic links, redirecting fil...

CVE-2026-40343

CVE-2026-40343 concerns free5GC UDR (user data repository) in versions up to and including 1.4.2. The issue is a fail‑open handling flaw in the POST handler for /nudr-dr/v2/policy-data/subs-to-notify: after errors reading the request body or deserializing input, the handler does not terminate and...