Exploit for Path Traversal in Gogs

Gogs RCE Exploit CVE-2025-8110 !Pythonhttps://img.shield...

CVE-2026-23500

creationtimestamp| type| source ---|---|--- 2026-04-11 20:00:04+00:00| seen| https://t.me/GithubRedTeam/79903 2026-04-11 23:00:11+00:00| published-proof-of-concept| Telegram/-QW6QQYPCPma3nTEKSDXwWCLyB9ySFogn0ZxSL2Okgx-9o 2026-04-12 03:00:07+00:00| published-proof-of-concept|...

CVE-2026-23900

creationtimestamp| type| source ---|---|--- 2026-04-11 16:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjaa3ticua2z...

CVE-2026-35559

creationtimestamp| type| source ---|---|--- 2026-04-11 08:54:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mj7hmubcvs2v...

CVE-2026-4155

creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw 2026-04-11 05:51:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj75gfu4242h...

CVE-2026-3358

creationtimestamp| type| source ---|---|--- 2026-04-11 02:07:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6qvfp6f72o 2026-04-18 08:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjqzp3g4ep2n...

CVE-2026-40199

creationtimestamp| type| source ---|---|--- 2026-04-11 01:45:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6pnsttg52t 2026-04-13 18:01:28+00:00| published-proof-of-concept| Telegram/GGU4l3ghB8B3Ai9EUxQ7xduUqm6NQYmTwZHkJoJpqeQPEQk...

CVE-2026-3865

creationtimestamp| type| source ---|---|--- 2026-04-11 01:40:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj6petqw242e 2026-04-13 12:56:04+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3mjew2p3csl2a 2026-04-13 15:06:04+00:00| seen|...

CVE-2026-34719

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme HTTP/HTTPS as well as the hostname was checked. This could end up in retrieving...

CVE-2026-39922

creationtimestamp| type| source ---|---|--- 2026-04-10 22:28:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6eoepih22t 2026-06-08 15:11:10+00:00| seen| https://gist.github.com/alon710/56fac469b83d68f32bede1d2945e0063...

CVE-2026-40178

creationtimestamp| type| source ---|---|--- 2026-04-10 22:15:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6dvh32722k...

CVE-2026-39921

creationtimestamp| type| source ---|---|--- 2026-04-10 22:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6deioc5b2z...

CVE-2026-35582

creationtimestamp| type| source ---|---|--- 2026-04-10 21:36:34+00:00| published-proof-of-concept| https://github.com/NationalSecurityAgency/emissary/security/advisories/GHSA-3p24-9x7v-7789 2026-04-18 03:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhkocgeg2f 2026-04-18...

CVE-2026-40177

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-10 22:12:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6drm3wek2k...

CVE-2026-33702

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo 2026-04-17 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjov6vd4y42g...

CVE-2026-2437

creationtimestamp| type| source ---|---|--- 2026-04-10 20:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj65zuptdr2f...

CVE-2026-40315

creationtimestamp| type| source ---|---|--- 2026-04-10 19:32:00+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x783-xp3g-mqhp 2026-04-14 05:18:05+00:00| published-proof-of-concept| Telegram/pSCCNMgE3Fpe3zcCZgeqk6LWYSbZiR1jqFncMFnyrTX8KY 2026-04-14 07:48:06+00:00| seen|...

CVE-2026-32931

creationtimestamp| type| source ---|---|--- 2026-04-10 19:31:17+00:00| published-proof-of-concept| Telegram/5BYtFCja3ItyUAudrFtyDv4j4kJF13U-uq-WjYMkVFgHgE 2026-04-10 19:31:23+00:00| published-proof-of-concept| Telegram/fSWJ5AllMbSniV0KxDg2z0mHSbTQACCF2EWZ07rPh-YE 2026-04-11 07:05:11+00:00| seen|...

GHSA-39PP-XP36-Q6MG

creationtimestamp| type| source ---|---|--- 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc...

cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

A flaw was found in the tarfile module of cpython. This vulnerability allows a remote attacker to craft a malicious tar archive that, when processed, could be misinterpreted by the tarfile module. This misinterpretation occurs because the module incorrectly applies normalization of AREGTYPE block...