CVE-2026-6238

creationtimestamp| type| source ---|---|--- 2026-04-28 20:22:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfyc2yf52v 2026-07-11 17:20:42+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

EUVD-2026-26144

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-6970

creationtimestamp| type| source ---|---|--- 2026-04-28 20:11:02+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mklfebpkit2s 2026-05-01 07:03:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrkpz77ed26 2026-05-06 07:40:29+00:00| seen|...

CVE-2026-7360

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:15:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklwel5g7v2v 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7358

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvarfm3u2h 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7361

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvjpue7m2p 2026-04-29 04:10:36+00:00| seen|...

CVE-2026-7351

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklu5o2z2n2k 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7348

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklugzsstg2e 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-23562

creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...

CVE-2026-42544

creationtimestamp| type| source ---|---|--- 2026-04-28 18:30:03+00:00| published-proof-of-concept| https://github.com/emmett-framework/granian/security/advisories/GHSA-vrg7-482j-p6f6...

CVE-2026-5942

creationtimestamp| type| source ---|---|--- 2026-04-28 16:41:59+00:00| seen| https://bsky.app/profile/netsecio.bsky.social/post/3mkkzoiqhsq2q...

CVE-2026-7289

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7288

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

CVE-2026-7289 D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7289

The CVE-2026-7289 entry concerns D-Link DIR-825M (firmware version 1.1.12). A vulnerability in the function sub_414BA8 of /boafrm/formWanConfigSetup allows manipulation of the submit-url argument to trigger a buffer overflow, enabling a remote attack. Public exploitation appears to be available. ...

CVE-2026-7289 D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

EUVD-2026-26068

A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7288 D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

EUVD-2026-26067

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...