CVE-2026-44407

creationtimestamp| type| source ---|---|--- 2026-05-07 13:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe7yrvv62v...

CVE-2025-9661

creationtimestamp| type| source ---|---|--- 2026-05-07 10:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlayppxeh32e 2026-05-07 23:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcgdwdsu52z 2026-05-08 18:37:07+00:00| seen|...

CVE-2026-41413

creationtimestamp| type| source ---|---|--- 2026-05-07 10:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaxmolwau2p...

CLSA-2026-1778142589 python3: Fix of 2 CVEs

CVE-2026-4519: reject leading dashes in webbrowser URLs to block command-line option injection via webbrowser.open - CVE-2026-4786: validate the post-substitution URL in webbrowser UnixBrowser.open so that "%action" cannot smuggle a dash-prefixed flag past the CVE-2026-4519 dash-prefix check...

CVE-2026-7252

creationtimestamp| type| source ---|---|--- 2026-05-07 06:54:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2wfwpp2w 2026-05-07 10:43:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaztqrzjx2r 2026-05-22 11:09:36+00:00| seen|...

CVE-2026-6692

creationtimestamp| type| source ---|---|--- 2026-05-07 06:54:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2p5q2s2e 2026-05-07 10:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlayyrc6ro2r 2026-05-07 11:11:07+00:00| seen|...

CVE-2026-42216

creationtimestamp| type| source ---|---|--- 2026-05-07 06:22:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlalbmrlgp2p 2026-07-03 22:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprkkr2kij2e 2026-08-25 08:00:05+00:00| seen|...

CVE-2026-41202

creationtimestamp| type| source ---|---|--- 2026-05-07 06:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlakynbolz2e 2026-05-07 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116532473442667986 2026-05-07 09:00:34+00:00| seen|...

CVE-2026-41143

YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data'idfiche' value sourced from $POST'idfiche' is concatenated directly into a raw SQL query without any...

CVE-2026-41675

creationtimestamp| type| source ---|---|--- 2026-05-07 05:59:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlajy6oalg2p...

CVE-2026-41674

creationtimestamp| type| source ---|---|--- 2026-05-07 05:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlajqdpn2h2i...

CVE-2026-40981

creationtimestamp| type| source ---|---|--- 2026-05-07 05:50:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlajhejl3d2h 2026-05-07 06:48:23+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431 2026-05-07 07:29:50+00:00| seen|...

CVE-2026-41002

creationtimestamp| type| source ---|---|--- 2026-05-07 05:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaimg64462k 2026-05-07 06:48:23+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431 2026-05-07 07:29:50+00:00| seen|...

CLSA-2026-1778130778 tomcat: Fix of 2 CVEs

CVE-2025-48988: limit number and header size of multipart parts - CVE-2025-52520: use Math.addExact and long postSize to prevent overflow bypass of maxPostSize during multipart upload...

CVE-2026-41143

YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data'idfiche' value sourced from $POST'idfiche' is concatenated directly into a raw SQL query without any...

EUVD-2026-28312

YesWiki is a wiki system written in PHP. Prior to version 4.6.1, YesWiki bazar module contains a SQL injection vulnerability in tools/bazar/services/EntryManager.php at line 704. The $data'idfiche' value sourced from $POST'idfiche' is concatenated directly into a raw SQL query without any...

CVE-2026-41669

creationtimestamp| type| source ---|---|--- 2026-05-07 04:58:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlagko3g752n 2026-05-07 07:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlap55q4jn2i...

CVE-2016-7883

creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:09+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep7byzq2p...

CVE-2016-0955

creationtimestamp| type| source ---|---|--- 2026-05-07 04:25:07+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlaep5nr3325...

CVE-2026-41890

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before version 0.31.8.0, the deleteProcess action accepts a POST parameter tables containing arbitrary table names. These are pass...