CVE-2026-6199

creationtimestamp| type| source ---|---|--- 2026-04-13 20:58:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqyp7l242m 2026-04-13 21:22:51+00:00| published-proof-of-concept| Telegram/E9uORDS5VkHsQsN2ALVesQEvtj4s64kK7xuccSs6pLn-94...

CVE-2026-6197

creationtimestamp| type| source ---|---|--- 2026-04-13 20:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqgs65ao2t 2026-04-13 21:22:40+00:00| seen| Telegram/c7uZKOPwVy2hcS0GAJgtvZD1v9yKI-NyzhYNMP5jQugHxE...

CVE-2026-40041

creationtimestamp| type| source ---|---|--- 2026-04-13 20:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpw2qay42o...

CVE-2026-33659 EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side Request Forgery SSRF via a DNS rebinding TOCTOU condition. Host validation uses dnsgetrecord but the actual HTTP...

CVE-2026-6202

creationtimestamp| type| source ---|---|--- 2026-04-13 20:11:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfofgbqjr2w...

CVE-2026-41130

creationtimestamp| type| source ---|---|--- 2026-04-13 19:51:06+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-95wr-3f2v-v2wh 2026-04-22 02:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2hgcolro2p...

CVE-2026-40265

creationtimestamp| type| source ---|---|--- 2026-04-13 19:31:57+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p5w6-75f9-cc2p 2026-04-17 03:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnyiejwmc22...

CVE-2026-39715

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.5.5...

CVE-2026-39466

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through = 2.4.7...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

CVE-2026-6196

creationtimestamp| type| source ---|---|--- 2026-04-13 19:19:19+00:00| published-proof-of-concept| Telegram/7iGszM2mqKx30nQgCgbQFUXsVI5c5hkrxtNNiaNgzMbZ5ag 2026-04-13 20:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpdym7y62o...

CVE-2026-6195

creationtimestamp| type| source ---|---|--- 2026-04-13 18:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzt73vl2p 2026-04-13 19:19:19+00:00| published-proof-of-concept| Telegram/7iGszM2mqKx30nQgCgbQFUXsVI5c5hkrxtNNiaNgzMbZ5ag 2026-04-13 20:43:06+00:00| seen|...

CVE-2026-31281

creationtimestamp| type| source ---|---|--- 2026-04-13 18:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhfp76w32a...

CVE-2026-31283

creationtimestamp| type| source ---|---|--- 2026-04-13 18:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfha65ick2z 2026-08-29 23:00:08+00:00| seen| Telegram/TpDEhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek 2026-08-30 00:00:12+00:00| seen|...

CVE-2026-30811

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfi2s43h22m...

CVE-2026-6183

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:43+00:00| seen| Telegram/mgx4OESgILIX0WlIlJJnUrKrutJBiy7rqG6NL0bWgANWmeU 2026-04-13 19:02:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfkkoi5yq2a...

CVE-2026-39940

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel' button on the page. For...

CVE-2026-39940

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel' button on the page. For...

CVE-2026-6186

creationtimestamp| type| source ---|---|--- 2026-04-13 16:32:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfc5ggvja25 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:01:52+00:00| seen|...

Malicious Package

Overview upstart.previewcss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...