CVE-2026-45351

creationtimestamp| type| source ---|---|--- 2026-05-09 23:41:57+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx 2026-05-16 01:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwnhsgefg2n...

CVE-2026-43943

creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhavjnnhp2s...

CVE-2026-8195

creationtimestamp| type| source ---|---|--- 2026-05-09 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhalbqgdr2e...

CVE-2026-42256

creationtimestamp| type| source ---|---|--- 2026-05-09 21:55:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhacdcpm52q 2026-05-10 12:01:24+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlipltms6q2p...

CVE-2026-42245

creationtimestamp| type| source ---|---|--- 2026-05-09 21:13:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5y7rxta2k 2026-05-10 12:01:28+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplx57y32v...

CVE-2026-8196

creationtimestamp| type| source ---|---|--- 2026-05-09 21:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5soy25r2h 2026-05-13 15:00:06+00:00| seen| Telegram/cc4rNasGAf6eBRoD2kZTJIxW5lr85DmN8AZG7mw1GXsUUwc...

CVE-2026-42574

The CVE-2026-42574 issue affects apko dirFS used to build/publish OCI images. A crafted APK could place a TypeSymlink tar entry whose target points outside the build root, enabling traversal to host paths via subsequent directory creation or write operations within the same or later archive. Root...

Malicious code in @matjp/dvi-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285904d13f5d698c3c33461fe969265ca73c3041db80eabe5637c1ebd3f3ca9b The package @matjp/dvi-decode was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-8187

creationtimestamp| type| source ---|---|--- 2026-05-09 15:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgj4jqtbz2k...

CVE-2026-8186

creationtimestamp| type| source ---|---|--- 2026-05-09 14:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgitldbrp2p...

Liberapay: another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link

Hello again i discovered that there is another Liberapay profile of Liberapay team member at liberapay.com/mdvhimself contains a link to an expired Twitter account, creating a Broken Link Hijacking BLH vulnerability. An attacker could register the expired handle and control what appears to be an...

CVE-2026-1749

creationtimestamp| type| source ---|---|--- 2026-05-09 12:35:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgayzl6gq2k...

CVE-2026-32683

creationtimestamp| type| source ---|---|--- 2026-05-09 12:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgaq35vbe2n 2026-05-18 02:00:04+00:00| seen| https://t.me/GithubRedTeam/84618 2026-05-18 03:00:14+00:00| published-proof-of-concept|...

CVE-2026-42310

creationtimestamp| type| source ---|---|--- 2026-05-09 08:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlftlkkmrt2t...

GHSA-2F25-PFQ3-C7H8

creationtimestamp| type| source ---|---|--- 2026-05-09 06:10:29+00:00| seen| https://gist.github.com/alon710/5630cef7c3595002259238662d69e7b6...

CVE-2026-42461

creationtimestamp| type| source ---|---|--- 2026-05-09 05:12:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfibxtzg32e...

CVE-2026-6860

creationtimestamp| type| source ---|---|--- 2026-05-09 05:10:28+00:00| seen| https://gist.github.com/alon710/125ca2c976df983809333bd3a8522eed...

EUVD-2025-209754

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

CVE-2025-15634 HCL BigFix WebUI is affected by a missing authorization vulnerability

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

CVE-2025-66172

creationtimestamp| type| source ---|---|--- 2026-05-09 04:51:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfh3cmokg25...