CVE-2026-5442

creationtimestamp| type| source ---|---|--- 2026-04-09 16:30:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3a5t24yy2j 2026-04-14 20:03:31+00:00| seen| Telegram/BoOqWaO3KXSkNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ...

CVE-2026-39843

Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw is incomplete which could lead to the same full read Server-Side Request Forgery when a normal html page contains a link tag with an href that redirects to a private IP address ...

CVE-2026-33266

creationtimestamp| type| source ---|---|--- 2026-04-09 15:03:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj33cf7s6b2p 2026-04-10 21:23:28+00:00| seen| Telegram/OQKBgo-nZL6sXwBX9bmjZlSNqFSsDAVUFOIG0ZNThQ0ug 2026-04-12 11:59:55+00:00| seen|...

CLSA-2026-1775722568 binutils: Fix of 4 CVEs

CVE-2025-5244: fix NULL pointer dereference in elfgcsweep for empty section groups - CVE-2025-5245: fix memory corruption in debugtypesamep incorrect NULL check - CVE-2026-3441: fix out-of-bounds read in xcofflinkaddsymbols xscnlen bounds check - CVE-2026-3442: fix out-of-bounds read in...

CVE-2026-4660

HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package...

CVE-2026-33459

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlogbtp2z...

CVE-2025-66038

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b...

CVE-2025-66215

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b...

CVE-2026-25430

creationtimestamp| type| source ---|---|--- 2026-04-09 11:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2pfe25hm2c...

CVE-2026-25013

creationtimestamp| type| source ---|---|--- 2026-04-09 10:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2lzzujah2u...

CVE-2026-40151

creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pm96-6xpr-978x 2026-04-09 22:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tuejt7f23...

CVE-2026-40111

creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:19+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v7px-3835-7gjx 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-09 23:30:43+00:00|...

GHSA-42XW-2XVC-QX8M

creationtimestamp| type| source ---|---|--- 2026-04-09 09:46:45+00:00| seen| https://gist.github.com/podhmo/d72566411eddd2d13a2e11b9b06e9d7c...

CVE-2026-5854

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cinfgnd2j 2026-04-09 08:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2emvj2ql2z 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

CVE-2026-5853

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cifymxh2s 2026-04-09 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2evtxrk32i 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

CVE-2026-5844

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844 D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844

The CVE-2026-5844 entry describes a vulnerability in D-Link DIR-882 (firmware 1.01B02) affecting the HNAP1 SetNetworkSettings handler, specifically the prog.cgi function sprintf. Manipulating the IPAddress argument triggers an OS command injection, with remote exploitation possible. Public exploi...

CVE-2026-5844 D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...