CVE-2026-44668

creationtimestamp| type| source ---|---|--- 2026-05-26 19:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrq2hvnlt2p...

CVE-2026-24200

creationtimestamp| type| source ---|---|--- 2026-05-26 19:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrptqprti2h...

CVE-2026-24193

creationtimestamp| type| source ---|---|--- 2026-05-26 19:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroq2gwf32t...

CVE-2026-47715

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-46431

CVE-2026-46431 affects Algernon’s SSE event server prior to version 1.17.7, where Access-Control-Allow-Origin was hardcoded to “*”. This allowed cross-origin EventSource connections to read the live filename stream, compromising confidentiality. The issue is fixed in 1.17.7; upgrading to that ver...

CVE-2026-46431 Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, the SSE event server's Access-Control-Allow-Origin response header was hardcoded to the wildcard regardless of the caller's Origin. Because EventSource does not preflight and does not send cookies, the wildcard is sufficient ...

CVE-2026-47715

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without requiring it to belong to the issue in the URL, enabling a logged-in user with access to one project to view ...

CVE-2026-47715 Bugsink: Issue event views can show an event from another project if its UUID is known

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-47715

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-47715 Bugsink: Issue event views can show an event from another project if its UUID is known

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a...

CVE-2026-8633

creationtimestamp| type| source ---|---|--- 2026-05-26 15:40:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrdbmewjs2b 2026-05-26 21:05:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mmrvgqw2dx26 2026-05-27 20:07:06+00:00| seen|...

[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence AI tools to make their attacks faster, stronger, and much harder to stop. According to...

XSSaudit

XSSAudit v2.0 — Advanced XSS Vulnerability Scanner For au...

CVE-2026-8046

creationtimestamp| type| source ---|---|--- 2026-05-26 09:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqposg3ca2h...

CVE-2026-44469

creationtimestamp| type| source ---|---|--- 2026-05-26 09:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqpftxzv42n...

CVE-2026-43827

creationtimestamp| type| source ---|---|--- 2026-05-26 08:53:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmka7upy25...

CVE-2025-8754

creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-03...

CVE-2017-10699

creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05 2026-05-26 16:09:32+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mmrewad7b42p...

Bugsink 安全漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the event pages did not require events to be issues within URLs, which could allow authenticat...

PT-2026-43305

Name of the Vulnerable Software and Affected Versions Bugsink versions prior to 2.2.0 Description Bugsink is a self-hosted error tracking tool. A project-boundary authorization issue exists where issue event pages accept a direct event identifier from the URL and retrieve the event without...