CVE-2026-8781

creationtimestamp| type| source ---|---|--- 2026-05-18 06:32:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4awjn5ds2h...

CVE-2026-8802

creationtimestamp| type| source ---|---|--- 2026-05-18 06:15:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116594110322861473 2026-05-18 13:01:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4wocxsjo2i...

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

PT-2026-41784

Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 Description OpenTelemetry eBPF Instrumentation exports raw Redis error text as the span status message. Because Redis error replies can contain sensitive values or attacker-controlled...

MINI-7J88-XJQ4-3V5X

Bulletin has no description...

GHSA-Q7RR-3CGH-J5R3

creationtimestamp| type| source ---|---|--- 2026-05-17 09:27:14+00:00| seen| https://gist.github.com/okilicarslan/c1a124840cde2bb66278de96a61a2a72...

CVE-2018-25337

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25337 2026-05-17 15:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2o45oufr2p...

Exploit for CVE-2026-0265

CVE-2026-0265 Risk Checker for Palo Alto PAN-OS A Python script...

GHSA-965H-392X-2MH5

creationtimestamp| type| source ---|---|--- 2026-05-16 02:04:03+00:00| seen| https://gist.github.com/AlgoDev-hash/09b8d3924b1510f4f9fb853b347af34a 2026-05-17 18:09:49+00:00| seen| https://gist.github.com/web3securityauditor/7d7d8acf63a2ec18ed25f500c878c123...

CLSA-2026-1778874422 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...

[SECURITY] Fedora 42 Update: nginx-mod-vts-0.2.4-9.fc42

Nginx virtual host traffic status module...

GHSA-WXW3-Q3M9-C3JR

creationtimestamp| type| source ---|---|--- 2026-05-15 21:40:29+00:00| seen| https://gist.github.com/alon710/4cc7bcd5f1c1a36dc5ed49cf14f62cbd...

Operation on a Resource after Expiration or Release

Overview Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release due to the failure to enforce the PostEditTimeLimit in the post patch and update API endpoints. An attacker can alter file attachments, properties, and pin status of posts after the...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-9.fc43

Nginx virtual host traffic status module...

[SECURITY] Fedora 44 Update: nginx-mod-vts-0.2.4-9.fc44

Nginx virtual host traffic status module...

CGA-G745-8989-65MC

Bulletin has no description...

CVE-2026-4053

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...

CVE-2026-4053 post edit time limit is not enforced on some post update operations

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...

CVE-2026-4053

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...