CVE-2026-40035

creationtimestamp| type| source ---|---|--- 2026-04-08 22:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizexd466p2t 2026-04-09 01:28:04+00:00| published-proof-of-concept| Telegram/ppPYRB7DfIS8K7XD1dDGxWPkeD0WXLmtAHjzWOZBPf3GFDk 2026-04-09 01:30:30+00:00| seen|...

CVE-2026-3199

creationtimestamp| type| source ---|---|--- 2026-04-08 22:47:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizeqrzleb25 2026-04-09 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116371806078783632 2026-04-09 00:00:44+00:00| seen|...

CVE-2026-3438 Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages

A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...

CVE-2026-3438

CVE-2026-3438 affects Sonatype Nexus Repository 3.x (versions 3.0.0 through 3.90.2). It is a reflected cross-site scripting vulnerability that lets unauthenticated remote attackers execute arbitrary JavaScript in a victim’s browser via a specially crafted URL. Exploitation requires user interacti...

CVE-2026-39362

creationtimestamp| type| source ---|---|--- 2026-04-08 22:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizciim22d2g 2026-04-20 17:20:51+00:00| seen| Telegram/GfeUhnyJYShCjvs7rm1XQAQJnKqowYjnl2h2DVxLAV4-eNA...

CVE-2026-34724

creationtimestamp| type| source ---|---|--- 2026-04-08 21:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbxtsm2b22 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 15:00:04+00:00|...

CVE-2026-35476

creationtimestamp| type| source ---|---|--- 2026-04-08 21:47:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbfr3z342o 2026-04-09 01:27:07+00:00| seen| Telegram/CihYo3BrEf6YGxiGwCEATnWAB3StjZgrXU02lSezsa6vAg...

CVE-2026-35165

creationtimestamp| type| source ---|---|--- 2026-04-08 21:44:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbaunxxe22...

CVE-2026-34837

creationtimestamp| type| source ---|---|--- 2026-04-08 21:41:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizb4fb2tj2d...

CVE-2026-34723

creationtimestamp| type| source ---|---|--- 2026-04-08 21:35:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizaqsxawp2n 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw...

CVE-2026-40029

parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen shell command, allowing arbitrary command execution via crafted .lnk filenames containing shell metacharacters. An attacker can craft a .lnk filename wi...

CVE-2026-40029 parseusbs < 1.9 Command Injection via Crafted LNK Filename

parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen shell command, allowing arbitrary command execution via crafted .lnk filenames containing shell metacharacters. An attacker can craft a .lnk filename wi...

EUVD-2025-209358

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /weblistopt.asp endpoint...

EUVD-2025-209349

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...

EUVD-2025-209354

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /webpost.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, userid, log, and time...

EUVD-2025-209360

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglbwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters...

EUVD-2025-209351

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /usergroup.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr...

EUVD-2025-209347

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

EUVD-2025-209363

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the httplanport parameter in the /webgl.asp endpoint...

EUVD-2026-20542

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow...