SUSE-SU-2026:1740-1 Security update for python-Django

This update for python-Django fixes the following issues - CVE-2026-3902: headers spoofing by exploiting an ambiguous mapping of two header variants in ASGIRequest requests bsc1261729. - CVE-2026-4277: permissions on inline model instances were not validated on submission of forged POST data in...

Lemmy may expose private community data through community, saved, liked, and modlog API views

NOTE: Only affects development version. Summary Lemmy applies private-community checks in PostView and CommentView, but several adjacent API views skip the accepted-follower filter. Bob, a registered user who is not an accepted follower, can read private community sidebar and summary fields. Alic...

GHSA-95Q8-X6R6-672M Lemmy may expose private community data through community, saved, liked, and modlog API views

NOTE: Only affects development version. Summary Lemmy applies private-community checks in PostView and CommentView, but several adjacent API views skip the accepted-follower filter. Bob, a registered user who is not an accepted follower, can read private community sidebar and summary fields. Alic...

CVE-2026-43581

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kzncyfq2z 2026-05-06 21:34:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nqjn5bp2t 2026-05-07 16:07:09+00:00| seen|...

CVE-2026-43580

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kz6t5qe2n 2026-05-06 21:38:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nx6b5ai2n...

CVE-2026-44116

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kizyhld2g 2026-05-06 20:37:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kk3hh5o2l 2026-05-06 20:40:56+00:00| seen|...

CVE-2026-44115

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kisf6b72q 2026-05-06 20:36:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kju767w2c 2026-05-06 21:49:50+00:00| seen|...

CVE-2026-44114

creationtimestamp| type| source ---|---|--- 2026-05-06 20:36:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kikwji62c 2026-05-06 20:36:11+00:00| seen| https://bsky.app/profile/potato.software/post/3ml7kimjqq52w 2026-05-06 20:36:45+00:00| seen|...

CVE-2026-20034

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nupzno2f 2026-05-06 17:23:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pbe23t2k 2026-05-06 19:30:10+00:00| seen|...

CVE-2026-20188

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nnixcb2r 2026-05-06 17:22:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ozpiwb2r 2026-05-07 00:53:19+00:00| seen|...

CVE-2026-5081

creationtimestamp| type| source ---|---|--- 2026-05-06 17:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml76h2e3pn2j 2026-05-06 17:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76ilwkxd2g...

CVE-2026-4882

creationtimestamp| type| source ---|---|--- 2026-05-06 15:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml6zko2ybi2c 2026-05-06 15:33:07+00:00| seen| https://bsky.app/profile/potato.software/post/3ml6zkokpcu2c 2026-05-16 15:00:07+00:00| published-proof-of-concept|...

CVE-2026-6788

creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aqfe6os2c 2026-05-06 17:43:28+00:00| seen|...

CVE-2026-6229

creationtimestamp| type| source ---|---|--- 2026-05-06 02:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5nxwigtp2q 2026-05-06 02:33:09+00:00| seen| https://bsky.app/profile/potato.software/post/3ml5nxwwnu32t...

ZTE多款产品 资源管理错误漏洞

ZTE H196Q is a product of China's ZTE Corporation. The ZTE H196Q is a network device. The ZTE H168N is a router. The ZTE H388X is a modem. Several ZTE products have a resource management vulnerability; this vulnerability arises from sending overly large POST request bodies in the...

YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers

Description: Stored Cross-Site Scripting XSS occurs when user-supplied input is persisted by the application and later rendered in another user's browser without proper sanitization or contextual output encoding. When the vulnerable sink is a high-traffic surface such as a public forum thread, th...

Cross-site Scripting (XSS)

Overview YAFNET.Core is an Open Source Forum solution! The YAF.NET project is an international collaboration of like-minded, skilled, and creative individuals who are striving to make YAF.NET the most robust and malleable forum solutions available. Affected versions of this package are vulnerable...

CVE-2026-44331

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z4tbpat2g 2026-05-05 20:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52qhxja22n 2026-05-06 07:49:10+00:00| seen|...

CVE-2026-43284

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

PT-2026-37310

Name of the Vulnerable Software and Affected Versions YetAnotherForum.NET YAF.NET versions prior to 4.0.5 YetAnotherForum.NET YAF.NET versions prior to 3.2.12 Description The thread posting and reply feature allows user-supplied content to be stored server-side and rendered on the thread page...