CVE-2022-50969

creationtimestamp| type| source ---|---|--- 2026-05-10 04:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2022-50969 2026-05-10 15:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj22difaf2h...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-6735

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...

CVE-2026-8211

creationtimestamp| type| source ---|---|--- 2026-05-10 01:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhmlp3n5q2r...

CVE-2026-45184

creationtimestamp| type| source ---|---|--- 2026-05-10 01:05:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhkxbdvhd2k...

PT-2026-39536

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L versions prior to 1.10.01 Description A remote buffer overflow exists in the HNAP Service component within the '/web/cgi-bin/hnap/hnap service' file. The issue occurs during the processing of the SetDeviceSettings function when...

PT-2026-39525

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in...

CVE-2026-45351

creationtimestamp| type| source ---|---|--- 2026-05-09 23:41:57+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx 2026-05-16 01:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwnhsgefg2n...

CVE-2026-43943

creationtimestamp| type| source ---|---|--- 2026-05-09 22:05:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhavjnnhp2s...

CVE-2026-8195

creationtimestamp| type| source ---|---|--- 2026-05-09 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhalbqgdr2e...

CVE-2026-42256

creationtimestamp| type| source ---|---|--- 2026-05-09 21:55:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhacdcpm52q 2026-05-10 12:01:24+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlipltms6q2p 2026-07-18 12:01:09+00:00| seen|...

CVE-2026-42245

creationtimestamp| type| source ---|---|--- 2026-05-09 21:13:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5y7rxta2k 2026-05-10 12:01:28+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplx57y32v 2026-07-18 12:01:17+00:00| seen|...

CVE-2026-8196

creationtimestamp| type| source ---|---|--- 2026-05-09 21:10:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh5soy25r2h 2026-05-13 15:00:06+00:00| seen| Telegram/cc4rNasGAf6eBRoD2kZTJIxW5lr85DmN8AZG7mw1GXsUUwc...

CVE-2026-42574

The CVE-2026-42574 issue affects apko dirFS used to build/publish OCI images. A crafted APK could place a TypeSymlink tar entry whose target points outside the build root, enabling traversal to host paths via subsequent directory creation or write operations within the same or later archive. Root...

Malicious code in @matjp/dvi-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285904d13f5d698c3c33461fe969265ca73c3041db80eabe5637c1ebd3f3ca9b The package @matjp/dvi-decode was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-8187

creationtimestamp| type| source ---|---|--- 2026-05-09 15:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgj4jqtbz2k...

CVE-2026-8186

creationtimestamp| type| source ---|---|--- 2026-05-09 14:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgitldbrp2p...

Liberapay: another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link

Hello again i discovered that there is another Liberapay profile of Liberapay team member at liberapay.com/mdvhimself contains a link to an expired Twitter account, creating a Broken Link Hijacking BLH vulnerability. An attacker could register the expired handle and control what appears to be an...

CVE-2026-1749

creationtimestamp| type| source ---|---|--- 2026-05-09 12:35:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgayzl6gq2k...

CVE-2026-32683

creationtimestamp| type| source ---|---|--- 2026-05-09 12:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlgaq35vbe2n 2026-05-18 02:00:04+00:00| seen| https://t.me/GithubRedTeam/84618 2026-05-18 03:00:14+00:00| published-proof-of-concept|...