CVE-2026-23757 GFI HelpDesk < 4.99.10 Stored XSS via Reports Module

GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFTReport::Create without HTML sanitization. Attackers can inject arbitrary JavaScript into the report title field when creating or editing a...

CVE-2026-39388

creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39388 2026-04-21 00:10:05+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mjxoyesgfk25 2026-04-21 02:53:57+00:00| seen|...

CVE-2026-39861

creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39861 2026-04-21 02:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxxg2owzt2o 2026-04-21 03:18:04+00:00| seen|...

CVE-2026-39946

creationtimestamp| type| source ---|---|--- 2026-04-20 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-39946 2026-04-21 02:29:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxwrdssuw2e...

CVE-2026-6650

creationtimestamp| type| source ---|---|--- 2026-04-20 16:12:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwucnz2j62p...

CVE-2026-34427

creationtimestamp| type| source ---|---|--- 2026-04-20 15:54:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwtd3srsn2p 2026-04-20 17:21:45+00:00| seen| Telegram/7kKxZY5KjVtNNq82uAZn6qPfMFkWsKJQXsAec31tFmY88 2026-04-20 17:22:08+00:00| seen|...

CVE-2026-6651

creationtimestamp| type| source ---|---|--- 2026-04-20 15:48:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwsycirht2i...

CVE-2026-6628

creationtimestamp| type| source ---|---|--- 2026-04-20 12:30:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwhuxxas62e...

CVE-2026-22740

creationtimestamp| type| source ---|---|--- 2026-04-20 12:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjwhlzimrz2w...

CVE-2026-22745

creationtimestamp| type| source ---|---|--- 2026-04-20 12:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjwhlzimrz2w 2026-04-29 14:49:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndup7mkz2q...

CVE-2026-6623

creationtimestamp| type| source ---|---|--- 2026-04-20 11:41:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwf53g6cz2c...

CVE-2026-39493

creationtimestamp| type| source ---|---|--- 2026-04-20 09:37:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjw67ee7wf2s...

CVE-2026-39533

creationtimestamp| type| source ---|---|--- 2026-04-20 08:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjw2u3mpop2x...

CVE-2026-6600

creationtimestamp| type| source ---|---|--- 2026-04-20 08:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzats44i2o...

CVE-2026-6601

creationtimestamp| type| source ---|---|--- 2026-04-20 07:55:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyjvf3y32k...

CVE-2026-6611

creationtimestamp| type| source ---|---|--- 2026-04-20 07:41:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxqdfnh32r...

CVE-2026-6606

creationtimestamp| type| source ---|---|--- 2026-04-20 07:15:49+00:00| published-proof-of-concept| Telegram/UmvoOoU43UC2jMqfLobJT4zrFIQl61G8LbQOBbZSD5gsLA 2026-04-20 07:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxtd3ieb2e...

CVE-2099-0001

creationtimestamp| type| source ---|---|--- 2026-04-20 07:08:11+00:00| seen| https://gist.github.com/KursatBB/7be1e57b5ab50dc717e7c8d1372da337...

Server-side Request Forgery (SSRF)

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the parseurl, prepareimage and openaiaudiototext functions. An attacker can access internal resources and potentially exfiltra...

CVE-2026-6602

creationtimestamp| type| source ---|---|--- 2026-04-20 05:17:17+00:00| published-proof-of-concept| Telegram/cTJ4Lg1Zeyay-KuZSLE18KcBtUPYEffFV-pgjTOYRDW1Fe8 2026-04-20 07:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyorsogq2p...