CVE-2026-6611

creationtimestamp| type| source ---|---|--- 2026-04-20 07:41:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxqdfnh32r...

CVE-2026-6606

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 07:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxtd3ieb2e...

CVE-2099-0001

creationtimestamp| type| source ---|---|--- 2026-04-20 07:08:11+00:00| seen| https://gist.github.com/KursatBB/7be1e57b5ab50dc717e7c8d1372da337...

Server-side Request Forgery (SSRF)

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the parseurl, prepareimage and openaiaudiototext functions. An attacker can access internal resources and potentially exfiltra...

CVE-2026-6602

creationtimestamp| type| source ---|---|--- 2026-04-20 05:17:17+00:00| published-proof-of-concept| Telegram/cTJ4Lg1Zeyay-KuZSLE18KcBtUPYEffFV-pgjTOYRDW1Fe8 2026-04-20 07:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyorsogq2p...

CVE-2026-22555

creationtimestamp| type| source ---|---|--- 2026-04-20 05:04:51+00:00| seen| https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y 2026-06-14 20:06:14+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fhx7-m96w-mv29...

CVE-2026-6596

creationtimestamp| type| source ---|---|--- 2026-04-20 04:43:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnshnyaj2e 2026-04-20 05:17:09+00:00| seen| Telegram/oT3io0aR7EQyKUnAhTuUuKTmw-PFwRgwwLAn7oSA51QT1kY...

CVE-2026-6586

creationtimestamp| type| source ---|---|--- 2026-04-20 04:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvmonthwz2r...

CVE-2026-6604 modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function parseurl/prepareimage/openaiaudiototext of the file src/agentscope/tool/multimodality/openaitools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument...

CVE-2026-6595

creationtimestamp| type| source ---|---|--- 2026-04-20 04:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvm5znf3l2k 2026-04-20 05:17:09+00:00| seen| Telegram/oT3io0aR7EQyKUnAhTuUuKTmw-PFwRgwwLAn7oSA51QT1kY...

CVE-2026-6584

creationtimestamp| type| source ---|---|--- 2026-04-20 04:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvlrd4sob2k...

CVE-2026-6587

creationtimestamp| type| source ---|---|--- 2026-04-20 03:54:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvl2loijv2o...

CVE-2026-6597

creationtimestamp| type| source ---|---|--- 2026-04-20 03:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjvi2a2inh2y 2026-04-20 04:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvllwxzce2c...

GHSA-F886-M6HF-6M8V

creationtimestamp| type| source ---|---|--- 2026-04-20 01:05:19+00:00| seen| https://gist.github.com/konard/dc529ad3e07305daab99c78bc17d7ea6 2026-04-27 21:04:47+00:00| seen| https://gist.github.com/konard/b4fdbcec737f21f5f1a690e8c86a6713 2026-04-27 22:32:44+00:00| seen|...

CVE-2026-6579

creationtimestamp| type| source ---|---|--- 2026-04-20 00:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjv6yj77vb2v...

CVE-2026-6583

creationtimestamp| type| source ---|---|--- 2026-04-20 00:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjv6pknaq72e...

CVE-2025-66954

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...

PT-2026-36834

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L Hardware Revision B2 Description A hardcoded telnet backdoor exists where the device starts a telnet daemon at boot via the /bin/telnetd.sh script. The system uses the username "Alphanetworks" and a static password "wrgn76 dlwb...

PT-2026-33792

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...

PT-2026-36837

Name of the Vulnerable Software and Affected Versions D-Link DIR-456U Hardware Revision A1 Description The device contains a hardcoded telnet backdoor. At boot, a telnet daemon is started via the script '/etc/init0.d/S80telnetd.sh' using the username "Alphanetworks" and a static password "whdrv01...