PT-2026-31064

Name of the Vulnerable Software and Affected Versions TLS 1.3 Description A denial of service can occur if one side of a TLS 1.3 connection sends multiple key update messages post-handshake within a single record, leading to a connection deadlock and uncontrolled resource consumption...

CVE-2026-5686

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-06 23:42:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miugvbhty22i 2026-05-29 06:07:29+00:00| seen|...

CVE-2026-5684

creationtimestamp| type| source ---|---|--- 2026-04-06 23:13:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miufd3cc6e2q 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw 2026-05-01 12:07:07+00:00| seen|...

CVE-2026-35395

creationtimestamp| type| source ---|---|--- 2026-04-06 23:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuestsrv22d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:39:23+00:00| seen|...

CVE-2026-35442

creationtimestamp| type| source ---|---|--- 2026-04-06 22:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miudrphust2d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:00:27+00:00| seen|...

CVE-2026-35441

creationtimestamp| type| source ---|---|--- 2026-04-06 22:41:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miudiqz3vi2d...

CVE-2026-35398

creationtimestamp| type| source ---|---|--- 2026-04-06 22:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucy4wlng2o...

CVE-2026-5708

creationtimestamp| type| source ---|---|--- 2026-04-06 22:28:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucrfzhbw2o 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-07 04:11:48+00:00| seen|...

CVE-2026-22675

creationtimestamp| type| source ---|---|--- 2026-04-06 22:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuc4p6oll2s...

CVE-2026-5685

creationtimestamp| type| source ---|---|--- 2026-04-06 22:08:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubnrikwb2g 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw 2026-04-30 01:37:07+00:00| seen|...

CVE-2026-35408

creationtimestamp| type| source ---|---|--- 2026-04-06 22:03:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubert3ch2d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 01:52:42+00:00| seen|...

CVE-2026-35410

creationtimestamp| type| source ---|---|--- 2026-04-06 22:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubc3nzwr24...

CVE-2026-35020

creationtimestamp| type| source ---|---|--- 2026-04-06 21:20:59+00:00| seen| Telegram/8Tvza3k4qy2IjH2O3f59isxEIVitW69EvgGBkLG1GZexI3E 2026-04-07 06:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv42qcohd27 2026-04-30 04:37:07+00:00| seen|...

CVE-2026-35393 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload

goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vulnerability is fixed in 2.0.0-beta.3...

EUVD-2026-19454

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customizesettingsnativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes. Combined with...

CVE-2026-35470

creationtimestamp| type| source ---|---|--- 2026-04-06 18:24:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv4qwen22t 2026-04-06 18:24:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv5jd3vu2j 2026-04-06 19:20:37+00:00| seen|...

CVE-2026-35173

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35047

creationtimestamp| type| source ---|---|--- 2026-04-06 18:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituac6cnv25 2026-04-06 19:29:29+00:00| published-proof-of-concept| Telegram/0wjdVVOdHVRh-NR-AUdnOvXJcqqbi6lE8Vl80iGy2s6Zy0...

CVE-2026-35173

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...

CVE-2026-35173 Chyrp Lite has an IDOR via Mass Assignment in Post Model

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions Edit Post, Edit Draft, Edit Own Post, Edit Own Draft to modify posts they do not own and do not have...