PT-2026-30379

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user manipulate and admin/settings/generall endpoints to...

CVE-2026-28797

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:37+00:00| published-proof-of-concept| Telegram/CEl2HN4MrzqJMXyxgw87k5eg4RsD4Gdp10Ib2zQOK7Dk 2026-04-03 23:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimvgajrpe23 2026-04-07 07:00:16+00:00| seen|...

CVE-2026-22665

creationtimestamp| type| source ---|---|--- 2026-04-03 22:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mims3hv75b2i 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 05:01:02+00:00| seen|...

EUVD-2026-18909

Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service...

GHSA-3JR7-6HQP-X679 Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service

Summary An uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to threa...

Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service

Summary An uncontrolled resource consumption vulnerability exists in the WebSocket implementation of the Mesop framework. An unauthenticated attacker can send a rapid succession of WebSocket messages, forcing the server to spawn an unbounded number of operating system threads. This leads to threa...

CVE-2026-34211

creationtimestamp| type| source ---|---|--- 2026-04-03 21:45:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8pfc-jjgw-6g26 2026-04-07 17:28:27+00:00| seen| Telegram/JtakylbYKAfJvCRBIgmgtreOTLAC-UR5YdC-v7gW7NnsM 2026-04-11 09:34:25+00:00| seen|...

Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity

Summary According to SignalK's security documentation, when a server is first initialized without security enabled, the /skServer/enableSecurity endpoint is intentionally exposed to allow the owner to set up the initial admin account. This initial open access is by design. However, the critical...

CVE-2026-34990

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That...

CVE-2026-0545

creationtimestamp| type| source ---|---|--- 2026-04-03 18:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimfityqht2i 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss 2026-04-04 06:00:22+00:00| seen|...

CVE-2026-23436

A flaw was found in the Linux kernel's network shaper module. A race condition can occur when a network device netdev is unregistered while its hierarchy is being created. This timing issue may allow the system to allocate resources that are not properly released, leading to a memory leak...

CVE-2026-35218

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc 2026-04-03 18:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimenycbpv2i 2026-04-04 06:17:29+00:00| seen|...

CVE-2026-35216

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc 2026-04-03 18:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimewx5ekf2g 2026-04-04 06:17:22+00:00| seen|...

CVE-2026-5469

creationtimestamp| type| source ---|---|--- 2026-04-03 17:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim726pmpr2i...

CVE-2025-68153

creationtimestamp| type| source ---|---|--- 2026-04-03 16:23:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim4z2h5dk2d 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...

CVE-2026-31401

creationtimestamp| type| source ---|---|--- 2026-04-03 16:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3v7xn6d25 2026-04-03 17:08:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116341872109036576...

GHSA-6FPF-248C-M7WM

creationtimestamp| type| source ---|---|--- 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec...

GHSA-9M44-RR2W-PPP7

creationtimestamp| type| source ---|---|--- 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec...

CVE-2026-23148

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:25+00:00| seen| Telegram/8Z1MnOUXqMZO7QZ9DS0AwhIu4NNyTl3IQipgv8hh4U6QtI 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 00:51:37+00:00| seen|...

CVE-2026-23136

creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 14:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlbgryvtcx2q 2026-05-07 20:00:00+00:00| seen|...