CVE-2026-8802

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipulation of the argument picfilename results in path traversal. The attack may be launched remotely. The patch is...

CVE-2026-8802 opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipulation of the argument picfilename results in path traversal. The attack may be launched remotely. The patch is...

CVE-2026-6341

creationtimestamp| type| source ---|---|--- 2026-05-18 09:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4kb2qod22k...

CVE-2026-3495

creationtimestamp| type| source ---|---|--- 2026-05-18 09:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jg7ejsq2p...

CVE-2026-6478

creationtimestamp| type| source ---|---|--- 2026-05-18 09:02:04+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mm4j4wewdng2 2026-06-05 14:33:15+00:00| seen| https://bsky.app/profile/pgexperts.bsky.social/post/3mnke6ysiwm2c 2026-06-23 19:16:28+00:00| seen...

CVE-2026-4273

creationtimestamp| type| source ---|---|--- 2026-05-18 08:59:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4j5attsm2h...

Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP. The list of identified packages is below - chalk-tempalte 825 Downloads @deadcode09284814/axios-util 284 Downloads...

CVE-2026-6381

creationtimestamp| type| source ---|---|--- 2026-05-18 08:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4iucfrwj2e 2026-05-30 11:01:39+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vleu4kp2g...

CVE-2026-1631

creationtimestamp| type| source ---|---|--- 2026-05-18 08:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4imms5k22h 2026-06-16 19:12:51+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mogixe3cpn2h...

CVE-2026-3220

creationtimestamp| type| source ---|---|--- 2026-05-18 08:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4i7w3k3b2e 2026-05-30 11:01:45+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vllbpsn2m 2026-06-25 16:11:31+00:00| seen|...

CVE-2026-2325

creationtimestamp| type| source ---|---|--- 2026-05-18 08:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4i2k3hdm2c...

CVE-2026-6334

creationtimestamp| type| source ---|---|--- 2026-05-18 08:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hvnoaei2o...

CVE-2026-28759

creationtimestamp| type| source ---|---|--- 2026-05-18 08:34:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hr67zby2q...

CVE-2026-6340

creationtimestamp| type| source ---|---|--- 2026-05-18 08:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hmztahz2c...

CVE-2026-3637

creationtimestamp| type| source ---|---|--- 2026-05-18 08:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hj6o32x2p...

SUSE-SU-2026:1970-1 Security update for php-composer2

This update for php-composer2 fixes the following issues - CVE-2026-40176: command injection via malicious Perforce repository definition bsc1262254. - CVE-2026-40261: command injection via malicious Perforce source reference/url bsc1262255. Changes for php-composer2: - version update to 2.2.27...

CVE-2026-8785

creationtimestamp| type| source ---|---|--- 2026-05-18 06:37:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4b7i5vqd2h 2026-05-18 06:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm4c3nhqcd2w...

CVE-2026-42657

creationtimestamp| type| source ---|---|--- 2026-05-18 06:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4ay4yrah2s...

CVE-2026-8781

creationtimestamp| type| source ---|---|--- 2026-05-18 06:32:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4awjn5ds2h...

CVE-2026-8783

creationtimestamp| type| source ---|---|--- 2026-05-18 06:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4aemodku2k...