CVE-2026-25203

creationtimestamp| type| source ---|---|--- 2026-04-10 02:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4bydxyvs2i 2026-04-10 03:17:30+00:00| published-proof-of-concept| Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI 2026-04-10 05:00:53+00:00| seen|...

CVE-2026-3360

creationtimestamp| type| source ---|---|--- 2026-04-10 02:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4bpfiglp2n 2026-04-10 03:17:30+00:00| published-proof-of-concept| Telegram/Fvik4eX2xz-nzJuB7IaHT1kkv6IwgWipFYk1oHJ2HiAA0EI 2026-04-10 05:00:42+00:00| seen|...

GHSA-HWR4-MQ23-WCV5 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, frankenphp-8.5, frankenphp-8.4, frankenphp-8.2...

GHSA-W8RR-5GCM-PP58 vulnerabilities

Vulnerabilities for packages: harbor, gotrue, milvus, datadog-agent-fips, net-kourier, peerdb-flow, gitaly, loki-fips, keda, commercial-expanso-edge, cilium-fips, opentelemetry-collector-contrib, jaeger-fips, grafana-rollout-operator-fips, tkn-fips, jaeger, ferretdb, opa, opentelemetry-collector,...

CVE-2026-1924 Aruba HiSpeed Cache <= 3.0.4 - Cross-Site Request Forgery to Plugin Settings Reset

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing nonce verification on the ahscajaxresetoptions function. This makes it possible for unauthenticated attackers to reset all plugin settings t...

CVE-2026-39625

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through = 3.0.3...

[SECURITY] Fedora 43 Update: doctl-1.154.0-1.fc43

The official command line interface for the DigitalOcean API...

[SECURITY] Fedora 43 Update: fido-device-onboard-0.5.5-8.fc43

A rust implementation of the FIDO Device Onboard Specification...

[SECURITY] Fedora 43 Update: libpng15-1.5.30-25.fc43

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 43 Update: libpng12-1.2.57-25.fc43

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

WordPress AddFunc Head & Footer Code plugin <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AddFunc Head & Footer Code versions = 2.3...

CVE-2026-33551

OpenStack Keystone vulnerability CVE-2026-33551 allows an authenticated user with only a reader role to obtain EC2/S3 credentials via restricted application credentials when using the EC2/S3 compatibility API (swift3/s3api). Affected products/versions: Keystone 14 through 26 before 26.1.1, 27.0.0...

PT-2026-32024

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, REST API keys are generated using md5time + user id 5 - rand10000, 10000. The rand10000, 10000 call always returns exactly 10000 min == max, making the formula effectively md5timestamp + user id5 - 10000. An attacker wh...

PT-2026-32596

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.133 Description An SQL identifier injection exists in SQLiteConversationStore where the table prefix configuration value is directly concatenated into SQL queries using f-strings without validation or...

AlmaLinux 9 : python3.9 (ALSA-2026:6766)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:6766 advisory. python: Python: Command-line option injection in webbrowser.open via crafted URLs CVE-2026-4519 Tenable has extracted the preceding description block directly from...

SUSE: Security Advisory (SUSE-SU-2026:1214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:1215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-5983

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:56+00:00| published-proof-of-concept| Telegram/jvxENlxS5zD0hLDn-51kxH7F1GhkNHxvGXTHS6t1bT7Jtk 2026-04-10 00:59:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj44lwuv2e2i 2026-04-10 06:08:15+00:00| seen|...

CVE-2026-5981

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:50+00:00| seen| Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM 2026-04-10 00:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4453nrzj2g 2026-04-10 06:08:01+00:00| seen|...

CVE-2026-40154

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:50+00:00| seen| Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM 2026-04-10 00:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj43o5tlum25 2026-04-10 06:11:33+00:00| seen|...