SolarWinds Serv-U 资源管理错误漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software developed by the American company SolarWinds. SolarWinds Serv-U has a resource management vulnerability that stems from unvalidated POST requests using the Content-Encoding: deflate header, which can lead to service crashes...

PT-2026-46213

Name of the Vulnerable Software and Affected Versions Soliloquy Lite version 2.5.6 Description A persistent cross-site scripting issue allows authenticated attackers to inject malicious scripts by inserting script tags into the post title field. This is achieved by submitting POST requests to the...

CVE-2026-41448

creationtimestamp| type| source ---|---|--- 2026-06-03 23:00:01+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3mng7lmfcsm2y 2026-06-08 18:39:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116715933567377709 2026-06-22 00:32:05+00:00| seen|...

CVE-2026-35075

creationtimestamp| type| source ---|---|--- 2026-06-03 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mng4btbrkf2f 2026-06-08 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnsbki6l6g2e 2026-07-03 22:58:50+00:00| seen|...

CVE-2026-43924

creationtimestamp| type| source ---|---|--- 2026-06-03 21:33:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng2qdsivd2c...

GHSA-RWCW-VQ68-G34P

creationtimestamp| type| source ---|---|--- 2026-06-03 21:20:17+00:00| seen| https://bsky.app/profile/tesaguri.fedibird.com.ap.brid.gy/post/3mnfzz4cfjm62...

CVE-2026-50033

creationtimestamp| type| source ---|---|--- 2026-06-03 21:05:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfz6353js2c...

Malicious Package

Overview chai-as-json is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-45702

creationtimestamp| type| source ---|---|--- 2026-06-03 20:58:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyspp2iz27...

CVE-2026-8874

creationtimestamp| type| source ---|---|--- 2026-06-03 20:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyntaisj2u...

CVE-2026-8888

creationtimestamp| type| source ---|---|--- 2026-06-03 20:53:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyjdrrbp2g...

CVE-2026-37700

creationtimestamp| type| source ---|---|--- 2026-06-03 20:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyf7fuh42g...

CVE-2026-26824

creationtimestamp| type| source ---|---|--- 2026-06-03 20:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfybeftfb2f...

CVE-2026-46775

creationtimestamp| type| source ---|---|--- 2026-06-03 20:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnfxlzyask2e...

CVE-2026-36613

Mercusys AC12G EU V1 with firmware AC12GEUV1200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing server state to unauthenticated adjacent network attackers...

CVE-2026-36574

creationtimestamp| type| source ---|---|--- 2026-06-03 16:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfkdsqjqi2u...

CVE-2026-36576

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2026-30650

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device...

CVE-2026-5241

creationtimestamp| type| source ---|---|--- 2026-06-03 15:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnffunrsrm2e 2026-07-03 00:09:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppayc3rqf2u 2026-08-20 21:05:03+00:00| seen|...

CVE-2026-35081

creationtimestamp| type| source ---|---|--- 2026-06-03 13:10:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ny6u772v 2026-06-03 21:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfywe2uj72n 2026-06-09 00:37:07+00:00| seen|...