PT-2026-39153

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but SESSION SAVE EVERY REQUEST is True. A remote attacker can steal a user's session after that user visits a cached public page. Earlier, unsupported Django...

WordPress bunny.net plugin <= 2.3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin bunny.net versions = 2.3.6...

CVE-2026-43534

creationtimestamp| type| source ---|---|--- 2026-05-05 13:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4axy3e6a2n 2026-05-05 17:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcaoglm2z 2026-05-24 23:37:06+00:00| seen|...

PT-2026-35574

Name of the Vulnerable Software and Affected Versions duartium papers-mcp-server version 9ceb3812a6458ba7922ca24a7406f8807bc55598 Description A path traversal issue exists in the search papers function within the src/main.py file. This occurs when the topic argument is manipulated, allowing a...

CVE-2026-6357

creationtimestamp| type| source ---|---|--- 2026-04-27 20:57:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkixil2wqr2j 2026-05-07 12:00:58+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlb66cgbnt23...

EUVD-2026-25734

A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects some unknown processing of the file browser-tools-server/browser-connector.ts. Executing a manipulation can lead to os command injection. The attack may be performed from remote. The exploit has been published...

CVE-2026-6599

creationtimestamp| type| source ---|---|--- 2026-04-20 08:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzijquam2v...

CVE-2026-40487

creationtimestamp| type| source ---|---|--- 2026-04-18 03:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhtmq72h2f 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk 2026-05-03 11:00:04+00:00| seen| https://t.me/GithubRedTeam/82615...

Microsoft Visual Studio Products (April 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. CVE-2026-32203 - Improper neutralization of special...

CVE-2026-39422

creationtimestamp| type| source ---|---|--- 2026-04-14 04:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgkripynq2m...

CVE-2026-6106

creationtimestamp| type| source ---|---|--- 2026-04-12 00:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjb2eweuut2k 2026-04-12 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116389146135516653 2026-04-12 01:30:41+00:00| seen|...

CVE-2026-34477

creationtimestamp| type| source ---|---|--- 2026-04-10 15:45:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj5o3zfi6q26 2026-05-13 16:36:23+00:00| seen| https://gist.github.com/ppkarwasz/53b0a3c07a9e44aa945726138f67d11c...

CVE-2026-39623

creationtimestamp| type| source ---|---|--- 2026-04-09 23:29:02+00:00| published-proof-of-concept| Telegram/nXzIQMxPCOAGX3i8onWM2mwWKDsz1vr3NClJO7twhRFOo...

GHSA-P34F-488J-5CWV

creationtimestamp| type| source ---|---|--- 2026-04-08 15:16:22+00:00| seen| Telegram/FBQImtKRYvjgrE67wEx022AiTPIajHaRZbB9YF5GqyRME...

CVE-2026-5630

A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-5559

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

EUVD-2026-18813

A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFESBTransmitMsg of the file cfesbpriv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but...

CVE-2025-40134

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

CVE-2025-40329

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

CVE-2026-5291

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:04:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miga5twbwl25 2026-04-01 18:00:00+00:00| seen|...