The vulnerability of the user interface of the universal monitoring system Zabbix allows a intruder to execute arbitrary code.

The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user opens a specially crafted link...

PT-2026-39263

Name of the Vulnerable Software and Affected Versions MCP Registry versions prior to 1.7.7 Description The public catalogue UI served at the 'GET /' endpoint is subject to stored cross-site scripting. This occurs via the server.websiteUrl field of published server.json files. The server-side...

PT-2026-39284

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description The AccountPending.svelte component renders admin-configured "Pending User Overlay Content" using marked.parse inside @html with an incorrect DOMPurify application order. DOMPurify is applied to t...

PT-2026-39201

Name of the Vulnerable Software and Affected Versions SolidCAM-GPPL-IDE versions 1.0.0 through 1.0.1 Description The GpplDocumentLinkHandler resolves the filename directive in GPPL postprocessor files into clickable links. The handler accepts arbitrary absolute, relative, UNC, and subfolder paths...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ceph asynchronous unlink operation reducing the inlink counter prematurely before it is...

PT-2026-39043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the batman-adv module when the batadv v elp get throughput function is called while the RTNL Routing Netlink lock is already held. This specifically happens when ...

Lemmy 代码问题漏洞

Lemmy is open-source software developed by Lemmy, used for building social news aggregators and web forums. Versions of Lemmy prior to 0.19.18 had code vulnerabilities. These vulnerabilities stemmed from the lack of mechanisms to reject loops, private links, or link-local targets when creating li...

CVE-2026-44581

creationtimestamp| type| source ---|---|--- 2026-05-07 23:40:51+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h 2026-07-09 03:00:04+00:00| seen| https://t.me/brutsecurity/2701 2026-07-10 00:00:12+00:00| seen| https://t.me/brutsecurity/2701 2026-07-11 09:00:04+00:0...

CVE-2026-7891

creationtimestamp| type| source ---|---|--- 2026-05-07 23:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlceez7izf2i 2026-05-08 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116536365967570800 2026-05-08 01:30:29+00:00| seen|...

CVE-2026-42225

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlccz54qx72k 2026-07-09 06:01:50+00:00| seen| https://bsky.app/profile/kotosecurity.bsky.social/post/3mq6xi3midu22...

CVE-2025-68060

creationtimestamp| type| source ---|---|--- 2026-05-07 21:53:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc7cdvech2w 2026-05-17 08:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlzx5yrq2q2c...

CVE-2026-8086

creationtimestamp| type| source ---|---|--- 2026-05-07 21:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc6x6bun32h...

CVE-2026-39820

creationtimestamp| type| source ---|---|--- 2026-05-07 21:36:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc6cr7gqp2e 2026-05-08 12:01:06+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldongyk2c2y 2026-05-15 12:01:12+00:00| seen|...

CVE-2026-8084

creationtimestamp| type| source ---|---|--- 2026-05-07 21:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc65ewtpz2i...

CVE-2026-39823

creationtimestamp| type| source ---|---|--- 2026-05-07 21:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5ty7npe2i 2026-05-08 12:01:11+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldonk3msi2v 2026-05-28 12:01:07+00:00| seen|...

CVE-2026-8083

creationtimestamp| type| source ---|---|--- 2026-05-07 21:21:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5iej3wd2t...

CVE-2026-8106

A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirectto query parameter on the /setup/unlock endpoint was reflected into an HTML attribute without proper sanitization, enabling an...

CVE-2026-8106

CVE-2026-8106 describes a reflected HTML injection in the GitHub Enterprise Server Management Console login page. The vulnerability lies in the redirect_to query parameter on the /setup/unlock endpoint, which is reflected into an HTML attribute without proper sanitization. An attacker could entic...

CVE-2026-33814

creationtimestamp| type| source ---|---|--- 2026-05-07 21:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc56sidqx2t 2026-05-08 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoneo25g2l 2026-05-15 12:30:07+00:00| seen|...

CVE-2026-30817

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...