CVE-2024-58343

creationtimestamp| type| source ---|---|--- 2026-04-17 00:36:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnolmlybi2p...

CVE-2026-33121

creationtimestamp| type| source ---|---|--- 2026-04-16 21:19:58+00:00| published-proof-of-concept| Telegram/9gW43b9NBHUXUdmlPt1TRwT-SkC94TdNTb4ccUrHaSNYF5M 2026-04-20 19:10:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjx6b4gneo2n 2026-04-20 22:00:12+00:00| seen|...

CVE-2026-33084

creationtimestamp| type| source ---|---|--- 2026-04-16 21:10:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjncy446rb2t 2026-04-16 21:19:58+00:00| published-proof-of-concept| Telegram/9gW43b9NBHUXUdmlPt1TRwT-SkC94TdNTb4ccUrHaSNYF5M 2026-04-20 19:10:37+00:00| seen|...

CVE-2026-41080

creationtimestamp| type| source ---|---|--- 2026-04-16 18:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjmyvfwkt32r 2026-04-26 16:37:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkfyhu6sds2h...

CVE-2026-3369

creationtimestamp| type| source ---|---|--- 2026-04-16 14:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjmo2aghst23...

CVE-2026-6410

creationtimestamp| type| source ---|---|--- 2026-04-16 13:38:03+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mjmjsivtzk2n...

CVE-2026-39313

creationtimestamp| type| source ---|---|--- 2026-04-16 11:59:54+00:00| published-proof-of-concept| https://github.com/QuantGeekDev/mcp-framework/security/advisories/GHSA-353c-v8x9-v7c3 2026-04-16 23:18:23+00:00| published-proof-of-concept| Telegram/x6U1CUbtpfWdw00zGhzow4OOkK7AiEHUVbiM6o3SMYH6zs0...

CVE-2026-6366

creationtimestamp| type| source ---|---|--- 2026-04-16 11:30:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcoi7iox2s 2026-05-20 02:36:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauo5ex4q2p...

CVE-2024-2374

creationtimestamp| type| source ---|---|--- 2026-04-16 10:08:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjm644xfd72t...

CVE-2026-22619

creationtimestamp| type| source ---|---|--- 2026-04-16 07:16:05+00:00| seen| Telegram/CPpzSH5KUbLaIS5NKRf7RUb00cNUuI-gWISSrbtluJWLjQ 2026-04-16 13:24:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmj2iqflw26...

CVE-2026-40316

creationtimestamp| type| source ---|---|--- 2026-04-16 00:58:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjl7dv32lv2x 2026-04-16 14:05:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmlcxb6k72h 2026-04-17 17:31:16+00:00| seen|...

CVE-2026-34632

creationtimestamp| type| source ---|---|--- 2026-04-15 23:25:44+00:00| published-proof-of-concept| Telegram/M6EVzZe60-ZK2hxHMbXVzi0icuKFKnAtI2GiQ0rZVKguBtE 2026-04-22 15:30:05+00:00| seen| https://infosec.place/objects/e937704a-fd88-4421-b9d6-cdadb714a102...

CVE-2026-6384

creationtimestamp| type| source ---|---|--- 2026-04-15 22:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkx7q2ru72k 2026-04-15 23:27:13+00:00| seen| Telegram/BTRiP8nJHP-5om9x2gw2G6e9UIMxwZAfdQggaCph1qz04g...

CVE-2026-40500

creationtimestamp| type| source ---|---|--- 2026-04-15 22:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkwif2xh32o...

CVE-2026-41138

creationtimestamp| type| source ---|---|--- 2026-04-15 21:42:02+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-f228-chmx-v6j6 2026-04-23 20:30:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6u56kkz62f 2026-04-23...

CVE-2026-40261

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-40261 Composer has Command Injection via Malicious Perforce Reference

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-40261

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-40261

CVE-2026-40261 affects the PHP package manager Composer. Affected are Composer versions 1.0–2.2.26 and 2.3–2.9.5, where Perforce::syncCodeBase() and Perforce::generateP4Command() construct shell commands by unsafe interpolation of input (sourceReference, source URL) into commands. This enables co...

CVE-2026-40261

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...