CVE-2026-11413

creationtimestamp| type| source ---|---|--- 2026-06-06 06:08:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116701664812182971 2026-06-06 15:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmxcogcry2s 2026-06-06 16:04:07+00:00| seen|...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

CVE-2026-6448

creationtimestamp| type| source ---|---|--- 2026-06-06 00:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgn6nqvl2e...

CVE-2026-48491

creationtimestamp| type| source ---|---|--- 2026-06-05 13:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkay2lpgr2j...

CVE-2026-50258

creationtimestamp| type| source ---|---|--- 2026-06-05 13:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkatubr7y2v 2026-06-06 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlkmlszlr2l 2026-06-06 18:17:27+00:00| seen|...

CVE-2026-10998

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10928

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10904

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 CVSS score: 9.8, a remote code execution...

CVE-2026-11309

creationtimestamp| type| source ---|---|--- 2026-06-05 03:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnja6ai2fh2h 2026-06-05 13:24:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11322

creationtimestamp| type| source ---|---|--- 2026-06-04 23:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniqhz3vnc26...

Malicious code in @jagreehal/workflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84103acc1e6580ad54c7a89f1ce423e9ac0a0ca4b943879c6f80e9e46fb23fce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-41860

creationtimestamp| type| source ---|---|--- 2026-06-04 03:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngo5dkpkj2f 2026-06-04 04:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngqeycd7q2k 2026-06-04 09:07:08+00:00| seen|...

CVE-2026-8885

creationtimestamp| type| source ---|---|--- 2026-06-03 05:15:50+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnee4piqoh2c...

CVE-2026-9722

creationtimestamp| type| source ---|---|--- 2026-06-03 02:59:51+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mne4jjtzad2t 2026-06-03 08:15:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mneo5tab5z27...

CVE-2026-7195

creationtimestamp| type| source ---|---|--- 2026-06-02 16:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncxos2hkz2j 2026-06-03 01:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndvu3euez2q 2026-06-04 17:37:06+00:00| seen|...

CVE-2026-39551

creationtimestamp| type| source ---|---|--- 2026-06-02 13:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncq57sabd27 2026-06-03 06:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnegmrltjg2h...

CVE-2026-10293

creationtimestamp| type| source ---|---|--- 2026-06-01 23:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbbrihf4g2f...

CVE-2026-0826

creationtimestamp| type| source ---|---|--- 2026-06-01 15:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnagtc27vi26 2026-06-02 02:10:54+00:00| seen| https://bsky.app/profile/vritrasecnews.bsky.social/post/3mnbjd3riw42f 2026-06-02 14:45:24+00:00| seen|...

CVE-2026-39828

creationtimestamp| type| source ---|---|--- 2026-06-01 15:36:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y...