RHEL 9 : rhc (RHSA-2026:7315)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:7315 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...

RockyLinux 10 : grafana (RLSA-2026:6344)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:6344 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...

CVE-2025-70797

Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Boxtitle and boxurl parameters...

JimuReport 代码注入漏洞

JimuReport is a free reporting tool developed by JEECG in China. Versions of JimuReport 2.3.0 and earlier had a code injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter dbUrl in the DriverManager.getConnection function within the Data Source Handler...

RHEL 10 : rhc (RHSA-2026:7328)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:7328 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...

ALSA-2026:7259 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details abou...

CVE-2026-40029

creationtimestamp| type| source ---|---|--- 2026-04-08 23:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizhssed572z 2026-04-09 01:27:57+00:00| published-proof-of-concept| Telegram/FNxyO19LE7y9kKO2yVURtyHZPYuEYu862yh0OCJKtv1fs 2026-04-09 05:15:18+00:00| seen|...

CVE-2026-30815

creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-13 05:33:41+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mje5dkd3ls2g 2026-05-07 14:00:13+00:00| seen|...

CVE-2026-24987

creationtimestamp| type| source ---|---|--- 2026-04-08 23:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizh5uqn4j2h...

CVE-2026-40032

creationtimestamp| type| source ---|---|--- 2026-04-08 23:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizgxwgcb32s 2026-04-09 01:28:04+00:00| published-proof-of-concept| Telegram/ppPYRB7DfIS8K7XD1dDGxWPkeD0WXLmtAHjzWOZBPf3GFDk 2026-04-09 06:00:21+00:00| seen|...

CLSA-2026-1775688811 Fix CVE(s): CVE-2026-32748, CVE-2026-33526

SECURITY UPDATE: denial of service via use-after-free in ICP - debian/patches/CVE-2026-33526.patch: remove duplicate rfc1738escape call in icpGetRequest that invalidated the previously escaped URL pointer - CVE-2026-33526 SECURITY UPDATE: denial of service via use-after-free in ICP request handli...

CVE-2026-39890

creationtimestamp| type| source ---|---|--- 2026-04-08 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizetxhbte2n 2026-04-09 01:27:32+00:00| published-proof-of-concept| Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0yFvD1Y 2026-04-09 06:00:37+00:00| seen|...

DEBIAN-CVE-2026-5880

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3438

A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...

CVE-2026-3438 Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages

A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...

CVE-2026-35401

creationtimestamp| type| source ---|---|--- 2026-04-08 21:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizbl575ko27 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:15:52+00:00| seen|...

CVE-2026-34985

creationtimestamp| type| source ---|---|--- 2026-04-08 21:37:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizauftpef22...

CVE-2026-35446

creationtimestamp| type| source ---|---|--- 2026-04-08 21:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizanh3xag2i 2026-04-09 01:26:43+00:00| published-proof-of-concept| Telegram/LyxiOFuM6k6JRrVhGkcWrU8R1Vj8dluNTy4xGDA54CBUTMw 2026-04-09 07:06:03+00:00| seen|...

EUVD-2025-209347

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

EUVD-2025-209345

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /urlrule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log...