CVE-2026-7660

creationtimestamp| type| source ---|---|--- 2026-05-28 11:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwsbye3v2i...

CVE-2026-6937

creationtimestamp| type| source ---|---|--- 2026-05-28 11:10:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvv5qkni52c 2026-05-29 06:01:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmxudcv27d2m...

CVE-2026-9806

creationtimestamp| type| source ---|---|--- 2026-05-28 10:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvudynin22p 2026-08-02 21:14:35+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 01:01:23+00:00| seen| https://t.me/GithubRedTeam/96334 2026-08-03 05:00:03+00:00|...

CVE-2026-7862

creationtimestamp| type| source ---|---|--- 2026-05-28 10:53:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvu746vgy2e 2026-05-28 16:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwffqixuf2e...

CVE-2026-9039

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzw4g35425 2026-07-24 14:24:47+00:00| seen|...

CVE-2026-40425

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01...

CVE-2025-48516

creationtimestamp| type| source ---|---|--- 2026-05-28 03:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116649970541941297...

CVE-2026-4888

creationtimestamp| type| source ---|---|--- 2026-05-28 02:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuz4qomi52p...

CVE-2026-45361

creationtimestamp| type| source ---|---|--- 2026-05-28 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuwrpmrwn2u...

CVE-2026-8915

creationtimestamp| type| source ---|---|--- 2026-05-28 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116649612164274667 2026-05-28 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmuuq7gg262p 2026-05-28 02:54:06+00:00| seen|...

CVE-2026-44930

creationtimestamp| type| source ---|---|--- 2026-05-28 00:02:18+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmupsheol22m 2026-05-29 13:10:09+00:00| seen| https://t.me/bdufstecru/3204 2026-06-20 21:07:08+00:00| seen|...

PT-2026-55107

Vulnerable to DNS rebinding attacks when using SSE http://b/499408790. During the beta phase, we implemented allowed-origins and allowed-hosts flags to align with MCP security guidelines. However, the hardcoded Access-Control-Allow-Origin: header in the SSE initialization handler was inadvertentl...

CVE-2026-45136

creationtimestamp| type| source ---|---|--- 2026-05-27 23:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p...

CVE-2026-42197

creationtimestamp| type| source ---|---|--- 2026-05-27 22:28:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmukl5eklo2x...

CVE-2026-44709

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3vojqv2q...

CVE-2026-5509

creationtimestamp| type| source ---|---|--- 2026-05-27 20:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmudq2zsso2h...

CVE-2026-44886 Pi.Alert: Web Interface Vulnerable to Unauthenticated Blind SQL Injection

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users when the action URL parameter is set to...

CVE-2026-44886 Pi.Alert: Web Interface Vulnerable to Unauthenticated Blind SQL Injection

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users when the action URL parameter is set to...

Allocation of Resources Without Limits or Throttling

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the date filter in filters/date.ts and the strftime formatter in...

GHSA-HH27-HF48-9F5Q LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)

Summary The date filter's strftime implementation parses width specifiers like %9999999d and forwards the captured width unchecked into pad/padStart in src/util/underscore.ts. The pad loop performs unbounded string concatenation without consulting the Context's memoryLimit or renderLimit, so a...