CVE-2025-61971

creationtimestamp| type| source ---|---|--- 2026-05-13 05:30:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlpl672ijz2q...

CVE-2026-6888

creationtimestamp| type| source ---|---|--- 2026-05-13 05:20:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlpkmbyxce2v...

SUSE CVE-2026-7819

Symbolic-link path traversal CWE-61, CWE-22 in pgAdmin 4 File Manager. checkaccesspermission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent kernel write follows symlinks. An authenticated user could plant a symbolic link inside their own storag...

CVE-2026-45225

creationtimestamp| type| source ---|---|--- 2026-05-13 03:46:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpfcs6lej2z...

SUSE CVE-2026-43382

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnllock ELP metric worker batadvvelpgetthroughput might be called when the RTNL lock is already held. This could be problematic when the work queue item is cancelled via canceldelayedworksync in...

SUSE CVE-2026-43458

In the Linux kernel, the following vulnerability has been resolved: serial: caif: hold tty-link reference in ldiscopen and serrelease A reproducer triggers a KASAN slab-use-after-free in ptywriteroom when caifserial's TX path calls ttywriteroom. The faulting access is on tty-link-port. Hold an...

CVE-2026-8449

creationtimestamp| type| source ---|---|--- 2026-05-13 03:14:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdjzpaov2k...

CVE-2026-1250

creationtimestamp| type| source ---|---|--- 2026-05-13 03:13:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdj5cwfo2g...

CVE-2026-8336

creationtimestamp| type| source ---|---|--- 2026-05-13 01:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp6und4ix2v...

CVE-2026-5371

creationtimestamp| type| source ---|---|--- 2026-05-13 01:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp6louhb72e...

CVE-2026-8053

creationtimestamp| type| source ---|---|--- 2026-05-13 01:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp6dzbsyw2i 2026-05-14 02:42:07+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3mlrs7g2for2f 2026-05-14 04:23:40+00:00| seen|...

CVE-2026-8200

creationtimestamp| type| source ---|---|--- 2026-05-13 01:37:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp65censj2n...

CVE-2026-1934

creationtimestamp| type| source ---|---|--- 2026-05-13 01:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlp5v3jg5j2c...

CVE-2026-8199

creationtimestamp| type| source ---|---|--- 2026-05-13 01:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5ilhpuq2e...

CVE-2026-8201

creationtimestamp| type| source ---|---|--- 2026-05-13 01:14:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp4tidec22o...

Garmin WDU 安全漏洞

Garmin WDU is a wireless data unit developed by Garmin Corporation, designed for data updates and maintenance of aviation electronic devices. Versions 1.1.6 and 2.5.0 of Garmin WDU contain security vulnerabilities. These vulnerabilities stem from the ability to allow symbolic link attacks, which...

PT-2026-40694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libata-core component where Link Power Management LPM, a power-saving mode for SATA links, causes random system freezes on ST1000DM010-2EP102 and ST2000DM008-2FR10...

PT-2026-40780

Name of the Vulnerable Software and Affected Versions @strapi/upload versions prior to 5.33.3 Description In the Upload plugin, Content API endpoints failed to enforce administrator-configured MIME type restrictions defined in plugin.upload.security.allowedTypes and deniedTypes. While these...

Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

The GTranslate module provides a language switcher widget for Drupal sites. The module’s widget JavaScript did not sufficiently validate that document.currentScript referred to the executing script element. A user who can add HTML to a page could cause the generated language-switcher links to poi...

The vulnerability of the SetDeviceSettings() function in D-Link DCS-935L wireless HD cameras’ microprogramming software allows a intruder to execute arbitrary code.

The vulnerability of the SetDeviceSettings function in D-Link DCS-935L wireless HD cameras’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...