CVE-2026-0804

creationtimestamp| type| source ---|---|--- 2026-05-12 09:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnh7jt6s22e 2026-05-12 14:16:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxzftvs62e...

CVE-2026-1185

creationtimestamp| type| source ---|---|--- 2026-05-12 09:04:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlngnmd4mh2o 2026-05-12 14:16:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxzftvs62e...

CVE-2026-3609

creationtimestamp| type| source ---|---|--- 2026-05-12 09:00:05+00:00| seen| https://t.me/GithubRedTeam/83906 2026-05-12 15:00:07+00:00| seen| Telegram/88YkBdmMMIAUjkN-cy3WAm2Yboedxaf0GfTYOA3KafU0qTc...

CVE-2026-0802

creationtimestamp| type| source ---|---|--- 2026-05-12 08:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlng4y57hj2e 2026-05-12 14:16:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxzftvs62e...

CVE-2026-7050

creationtimestamp| type| source ---|---|--- 2026-05-12 08:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlnevhmsnt2c 2026-05-13 01:32:24+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mlp5ttfegh2s...

CVE-2026-8260

A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...

CVE-2026-6256 Credits Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-6256 Credits Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-6256

The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-6256

CVE-2026-6256 affects the WordPress plugin Credits Shortcode (versions

CVE-2026-42564

creationtimestamp| type| source ---|---|--- 2026-05-12 05:38:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mln34rilvd2c...

CVE-2026-40135

creationtimestamp| type| source ---|---|--- 2026-05-12 05:31:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mln2r4b5qy2h 2026-05-12 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:07+00:00| seen|...

CVE-2026-40137

creationtimestamp| type| source ---|---|--- 2026-05-12 05:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mln2i5sblj2i 2026-05-12 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:07+00:00| seen|...

GHSA-G7CV-RXG3-HMPX

creationtimestamp| type| source ---|---|--- 2026-05-12 04:52:42+00:00| seen| https://gist.github.com/nrajlekhak/84bda8dc75e9212c7699a79bb34fa4dc 2026-05-12 11:45:22+00:00| seen| https://gist.github.com/maskeynihal/e780ed1e48c56592fc6612591a4bd420 2026-05-12 16:58:08+00:00| seen|...

SUSE CVE-2026-43420

In the Linux kernel, the following vulnerability has been resolved: ceph: fix inlink underrun during async unlink During async unlink, we drop the inlink counter before we receive the completion that will eventually update the inlink because "we assume that the unlink will succeed". That is not a...

CVE-2026-40137

SAP CVE-2026-40137 affects the SAP TAF_APPLAUNCHER component of Business Server Pages. It describes a Cross-Site Scripting (XSS) issue where an unauthenticated attacker can craft malicious links that, when a victim clicks, redirect to attacker‑controlled sites and potentially expose or alter info...

CVE-2026-27682 Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)

Due to a reflected cross-site scripting XSS vulnerability in SAP NetWeaver Application Server ABAP Applications based on Business Server Pages, an unauthenticated attacker could craft a URL that exploits an unprotected URL parameter to embed a malicious script. If a victim clicks the link, the...

EUVD-2026-29349

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

Exploit for Race Condition Enabling Link Following in Linuxfoundation Runc

CVE-2025-31133 Compose Build Lab This lab is a small PaaS sim...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...