CVE-2026-35441

creationtimestamp| type| source ---|---|--- 2026-04-06 22:41:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miudiqz3vi2d...

CVE-2026-35398

creationtimestamp| type| source ---|---|--- 2026-04-06 22:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucy4wlng2o...

CVE-2026-5708

creationtimestamp| type| source ---|---|--- 2026-04-06 22:28:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucrfzhbw2o 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-07 04:11:48+00:00| seen|...

CVE-2026-22675

creationtimestamp| type| source ---|---|--- 2026-04-06 22:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuc4p6oll2s...

CVE-2026-5685

creationtimestamp| type| source ---|---|--- 2026-04-06 22:08:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubnrikwb2g 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw 2026-04-30 01:37:07+00:00| seen|...

CVE-2026-35408

creationtimestamp| type| source ---|---|--- 2026-04-06 22:03:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubert3ch2d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 01:52:42+00:00| seen|...

CVE-2026-35410

creationtimestamp| type| source ---|---|--- 2026-04-06 22:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubc3nzwr24...

CVE-2026-35020

creationtimestamp| type| source ---|---|--- 2026-04-06 21:20:59+00:00| seen| Telegram/8Tvza3k4qy2IjH2O3f59isxEIVitW69EvgGBkLG1GZexI3E 2026-04-07 06:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv42qcohd27 2026-04-30 04:37:07+00:00| seen|...

CVE-2026-35393 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3...

EUVD-2026-19454

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customizesettingsnativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes. Combined with...

CVE-2026-35470

creationtimestamp| type| source ---|---|--- 2026-04-06 18:24:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv4qwen22t 2026-04-06 18:24:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv5jd3vu2j 2026-04-06 19:20:37+00:00| seen|...

CVE-2026-35173

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35047

creationtimestamp| type| source ---|---|--- 2026-04-06 18:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituac6cnv25 2026-04-06 19:29:29+00:00| published-proof-of-concept| Telegram/0wjdVVOdHVRh-NR-AUdnOvXJcqqbi6lE8Vl80iGy2s6Zy0...

CVE-2026-35173

Summary of CVE-2026-35173 (Chyrp Lite): Before 2026.01, the Post model vulnerable to an IDOR/mass assignment flaw allows authenticated users with post-edit permissions (Edit Post, Edit Draft, Edit Own Post, Edit Own Draft) to modify posts they do not own. Attacker can inject internal class proper...

CVE-2026-35173

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35173 Chyrp Lite has an IDOR via Mass Assignment in Post Model

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35173 Chyrp Lite has an IDOR via Mass Assignment in Post Model

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35173 Chyrp Lite has an IDOR via Mass Assignment in Post Model

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

EUVD-2026-19420

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2025-47400

creationtimestamp| type| source ---|---|--- 2026-04-06 17:31:48+00:00| seen| Telegram/RGEnmBafEPc7BPP7Kak77rIihdcDD1YNCnC4ac8698Y1cM 2026-04-09 07:00:18+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj2acursls2r 2026-06-01 18:00:00+00:00| seen|...