CVE-2026-41938

creationtimestamp| type| source ---|---|--- 2026-05-06 20:50:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7lbjqwpq2e...

CVE-2026-46364

creationtimestamp| type| source ---|---|--- 2026-05-06 20:49:15+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-289f-fq7w-6q2w 2026-05-16 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlwk4jqvtu23...

CVE-2026-41934

creationtimestamp| type| source ---|---|--- 2026-05-06 20:46:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2ndbu42n...

CVE-2026-43584

creationtimestamp| type| source ---|---|--- 2026-05-06 20:39:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kp3bhet2n 2026-05-06 21:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7o6oprf62i 2026-05-07 22:37:08+00:00| seen|...

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

CVE-2026-43174

A flaw was found in the Linux kernel's iouring/zcrx subsystem. Incorrect error handling during post-open operations allows for the direct release of zcrx ctx without ensuring that all associated page pools are properly terminated. This resource management issue could lead to system instability or...

GHSA-3R34-VQ8M-39GH Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Description Overview Lemur's LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership querie...

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Description Overview Lemur's LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership querie...

CVE-2026-34473

Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q. A denial-of-service condition can be triggered against the router's web interface by sending an oversized application/x-www-form-urlencoded POST...

CVE-2026-8028

creationtimestamp| type| source ---|---|--- 2026-05-06 18:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7cuo4hcs2e...

CVE-2026-8002

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:02:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7sozho6k2q 2026-05-07 01:27:19+00:00|...

CVE-2026-8016

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7sld34262t 2026-05-07 01:22:17+00:00|...

CVE-2026-8001

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7slsdvnu2l 2026-05-07 01:32:21+00:00|...

CVE-2026-8007

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-06 23:03:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7spblum42l 2026-05-07 19:44:34+00:00|...

CVE-2026-8000

creationtimestamp| type| source ---|---|--- 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260507 2026-05-07 01:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla3m7cje22k...

Craft CMS has Potential Authenticated Remote Code Execution via Malicious Attached Behavior

We identified a vulnerability in the latest version of Craft CMS which contains an input-handling flaw in a Yii object creation path that let any authenticated user inject malicious configuration and execute arbitrary commands on the server. Yii’s dynamic object configuration, as implemented in...

CVE-2025-31957

creationtimestamp| type| source ---|---|--- 2026-05-06 17:39:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7an7llqp2c...

CVE-2026-7049

creationtimestamp| type| source ---|---|--- 2026-05-06 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7abbghlf2g...

CVE-2026-20167

creationtimestamp| type| source ---|---|--- 2026-05-06 17:23:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pxhqef2z 2026-05-06 19:32:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml7gx7ppwt2e 2026-05-07 00:53:19+00:00| seen|...

CVE-2026-20185

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ngnlrb2r 2026-05-06 17:22:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77osaodu2t 2026-05-07 00:53:19+00:00| seen|...