CVE-2026-41429

creationtimestamp| type| source ---|---|--- 2026-05-06 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml5ta25iz32p 2026-05-08 11:02:15+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldle5h5if2b...

CVE-2025-71256

creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5ipdlj2k 2026-05-06 05:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5y2ok74h2t 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-43646

creationtimestamp| type| source ---|---|--- 2026-05-06 02:07:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25 2026-05-06 17:10:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r...

CVE-2026-35579

creationtimestamp| type| source ---|---|--- 2026-05-06 02:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5m7sjb5n2e...

CVE-2026-39402

creationtimestamp| type| source ---|---|--- 2026-05-06 01:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5l3vbuvo2r...

CVE-2026-41950

creationtimestamp| type| source ---|---|--- 2026-05-06 01:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5jyljkm52e 2026-07-13 13:00:07+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...

SUSE-SU-2026:21559-1 Security update for wireshark

This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor function can lead to memory exhaustion bsc1258907. - CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal...

PT-2026-37353

The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profile update endpoint — where raw POST parameters first name, last name, phone, notes bypass...

PT-2026-38263

Name of the Vulnerable Software and Affected Versions auth0-js versions 8.11.0 through 9.32.0 Description Improper validation in the Auth0.js SDK may allow the return of user profile data when a specifically crafted invalid ID token is used in conjunction with a valid access token. This issue...

PT-2026-38234

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description Insufficient access control in the Nostr plugin HTTP profile routes allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with...

CVE-2026-4062

creationtimestamp| type| source ---|---|--- 2026-05-05 22:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5akrpkkh2c...

CVE-2026-30923

creationtimestamp| type| source ---|---|--- 2026-05-05 22:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml57em74tm2t 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/modsecurity-denial-of-service-vulnerability20260507...

CVE-2026-33324

creationtimestamp| type| source ---|---|--- 2026-05-05 21:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56apcdmp2q 2026-05-06 03:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml5piwum6i2f 2026-05-06 03:00:48+00:00| seen|...

CVE-2026-32934

creationtimestamp| type| source ---|---|--- 2026-05-05 21:38:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55jcl3da2v...

CVE-2026-36365

creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ep5r6g2n...

CVE-2026-40682

creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ehoq2x2t...

CVE-2026-34458

creationtimestamp| type| source ---|---|--- 2026-05-05 20:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml537ce7c32i 2026-05-06 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116524688383360552 2026-05-06 00:00:43+00:00| seen|...

CVE-2026-33975

creationtimestamp| type| source ---|---|--- 2026-05-05 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52mdhzw52p...

CVE-2026-44331

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z4tbpat2g 2026-05-05 20:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52qhxja22n 2026-05-06 07:49:10+00:00| seen|...

Cross-site Request Forgery (CSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the userSavePhoto.php process. An attacker can overwrite authenticated users' profile photos with arbitrary content and trigger...