CVE-2026-41490

creationtimestamp| type| source ---|---|--- 2026-05-07 17:09:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgl5w4l2e 2026-05-07 19:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbwqptavd2e 2026-06-13 11:00:13+00:00| published-proof-of-concept|...

Origin Validation Error

Overview cinny is a Yet another matrix client Affected versions of this package are vulnerable to Origin Validation Error in the process that handles emoji pack avatar URLs in the service worker. An attacker can obtain a victim's access token by crafting a malicious emote pack with an...

CVE-2026-40108

creationtimestamp| type| source ---|---|--- 2026-05-07 16:00:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-06-02 13:45:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4nolce2y 2026-06-03 01:30:27+00:00| seen|...

CVE-2026-5791

creationtimestamp| type| source ---|---|--- 2026-05-07 15:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbjeviuvr2o 2026-05-07 19:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvlxsvwh2q 2026-05-07 19:22:38+00:00| seen|...

CVE-2026-44263

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...

CVE-2026-6795

creationtimestamp| type| source ---|---|--- 2026-05-07 15:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbisvazsw2p 2026-05-07 17:09:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgkc5da2c 2026-05-07 17:30:13+00:00| seen|...

CVE-2026-42285

creationtimestamp| type| source ---|---|--- 2026-05-07 14:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbh7mgfrb2k 2026-05-07 19:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvmgeszn2n...

CVE-2026-33587

creationtimestamp| type| source ---|---|--- 2026-05-07 14:27:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbgenzhu22n 2026-05-07 21:53:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc7bvidfi2g...

CVE-2026-41642

creationtimestamp| type| source ---|---|--- 2026-05-07 14:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbfkwcrnd2o 2026-05-07 21:06:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc4oenvqd2w...

CVE-2026-8080

creationtimestamp| type| source ---|---|--- 2026-05-07 14:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbeykz42c2c 2026-05-07 16:05:18+00:00| seen| https://social.circl.lu/@vulnerabilitylookup/116533236671872043...

CVE-2026-25468

creationtimestamp| type| source ---|---|--- 2026-05-07 13:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbekvjrcu2i...

CVE-2026-6805

creationtimestamp| type| source ---|---|--- 2026-05-07 13:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbegzas6x2i...

CVE-2026-41687 Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checks

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.8.1, the SSRF protection in endpoints/subscription/add.php line 42 and endpoints/payments/add.php line 40 uses an inline IP validation check FILTERFLAGNOPRIVRANGE | FILTERFLAGNORESRANGE that does not block...

CVE-2026-27416

creationtimestamp| type| source ---|---|--- 2026-05-07 13:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe4swj452v...

CVE-2026-27421

creationtimestamp| type| source ---|---|--- 2026-05-07 13:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbdrwbppn2i...

EUVD-2026-28342

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-4430

creationtimestamp| type| source ---|---|--- 2026-05-07 10:33:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlazbqzsac2i 2026-05-15 20:18:42+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mlw5ngxcuk2i...

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

CVE-2026-28201

Open Notebook v1.8.1 is affected by CVE-2026-28201 due to improper input validation and a permissive default CORS policy. A remote attacker can trick a legitimate user into altering or deleting arbitrary database entries via a specially crafted URL, with data exfiltration possible depending on de...

CVE-2026-44601

creationtimestamp| type| source ---|---|--- 2026-05-07 10:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaxktsipu2o...