CVE-2026-39366

creationtimestamp| type| source ---|---|--- 2026-04-06 12:36:13+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mmw7-wq3c-wf9p 2026-04-07 20:29:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwml4qbex2z...

CVE-2026-5687

creationtimestamp| type| source ---|---|--- 2026-04-06 10:27:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116357282336864740 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-06 23:31:59+00:00| seen|...

CVE-2026-31405

creationtimestamp| type| source ---|---|--- 2026-04-06 10:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miszprfg352j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen...

CVE-2026-31410

creationtimestamp| type| source ---|---|--- 2026-04-06 10:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misze75pzi2g...

BIT-MINIO-2026-34204 MinIO is Vulnerable to SSE Metadata Injection via Replication Headers

MinIO is a high-performance object storage system. Prior to version 2026.03.26, a flaw in extractMetadataFromMime allows any authenticated user with s3:PutObject permission to inject internal server-side encryption metadata into objects by sending crafted X-Minio-Replication- headers on a normal...

CVE-2026-5620

creationtimestamp| type| source ---|---|--- 2026-04-06 06:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mismwbqqid2s...

CVE-2026-5601

creationtimestamp| type| source ---|---|--- 2026-04-06 00:16:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirydeksir22...

CVE-2019-25702

creationtimestamp| type| source ---|---|--- 2026-04-05 23:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirx74rqnf2s 2026-04-07 23:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwxauri4j2r...

CVE-2019-25686

creationtimestamp| type| source ---|---|--- 2026-04-05 23:36:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirw3zgjhd2q 2026-04-10 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj452altak2u...

CVE-2026-5603

creationtimestamp| type| source ---|---|--- 2026-04-05 23:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvgw46kw2n 2026-04-06 04:18:10+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3misfu7eyij2d...

CVE-2026-4272

creationtimestamp| type| source ---|---|--- 2026-04-05 22:16:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mirro4yfa32c 2026-04-05 23:15:15+00:00| seen| Telegram/IfrlHOuFgZassia96sKylyqySIrKIXh5iSll0o84ef6g8E 2026-04-05 23:47:48+00:00| seen|...

CVE-2026-5562

creationtimestamp| type| source ---|---|--- 2026-04-05 12:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqsecleom2j 2026-04-05 13:15:30+00:00| published-proof-of-concept| Telegram/YoTTVTi9Zv4k-o9HEVMgDeJ9GD4yUztoWynI9KgYScEME 2026-07-13 22:00:17+00:00| seen|...

`logtrace` was removed from crates.io for malicious code

logtrace appeared to be downloading a RAT. The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecting and reporting this to the crates.io team!...

CVE-2026-5542

creationtimestamp| type| source ---|---|--- 2026-04-05 08:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqcofacya2o...

CVE-2026-39307

creationtimestamp| type| source ---|---|--- 2026-04-05 04:59:42+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4ph2-f6pf-79wv 2026-04-07 19:34:21+00:00| seen| Telegram/OYPeMWdUc2Y5vftMssiNoDYA806NyVd6-qxnWxvkgzfQI 2026-04-16 03:37:07+00:00|...

CVE-2026-5535

creationtimestamp| type| source ---|---|--- 2026-04-05 04:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipwxc3pvd27...

CVE-2026-5531

creationtimestamp| type| source ---|---|--- 2026-04-05 04:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipw4gb34z27...

GHSA-PRMX-7V35-7Q82

creationtimestamp| type| source ---|---|--- 2026-04-05 00:00:13+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mipgxyxmxn2t...

CVE-2026-5323

creationtimestamp| type| source ---|---|--- 2026-04-05 00:00:13+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mipgxyxmxn2t...

CVE-2026-27634

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...