CVE-2026-10771

A vulnerability was found in crmeb crmebjava 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request...

CVE-2026-10766

creationtimestamp| type| source ---|---|--- 2026-06-03 21:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mng26gc5iq2c...

GHSA-RWCW-VQ68-G34P

creationtimestamp| type| source ---|---|--- 2026-06-03 21:20:17+00:00| seen| https://bsky.app/profile/tesaguri.fedibird.com.ap.brid.gy/post/3mnfzz4cfjm62...

CVE-2026-45614

creationtimestamp| type| source ---|---|--- 2026-06-03 21:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfzvhtdre23...

CVE-2018-25412

creationtimestamp| type| source ---|---|--- 2026-06-03 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnfzbqicns2t 2026-06-12 19:21:01+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hkcsfei26 2026-06-12 19:23:11+00:00| seen|...

CVE-2026-26825

creationtimestamp| type| source ---|---|--- 2026-06-03 20:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfy2fprcb2u...

GHSA-M8XX-3X29-84H8

creationtimestamp| type| source ---|---|--- 2026-06-03 20:40:55+00:00| seen| https://gist.github.com/alon710/318ae5a8389c9b8cdb7f278e7a67a44b...

CVE-2026-36607

creationtimestamp| type| source ---|---|--- 2026-06-03 20:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfvlerwa42f 2026-06-03 23:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngbbmmzyt2f...

Exploit for CVE-2026-26897

EcoOnline EHS Android — Deep Link Validation Bypass → WebVie...

CVE-2026-8889 CVE-2026-8889

Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching 25,020 hashes and CIPA blocklist matching 12,352 hashes...

CVE-2026-8889

CVE-2026-8889 affects the Securly Chrome Extension, version 3.0.7. The underlying issue is the use of deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes). This weak crypto basis is cited across multiple sources (NVD, Red Hat, CERT, PT Sec...

CVE-2026-41283

creationtimestamp| type| source ---|---|--- 2026-06-03 17:37:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnfngopmqq2d 2026-06-04 05:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngtqx3mc725 2026-06-04 05:10:01+00:00| seen|...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-41032

creationtimestamp| type| source ---|---|--- 2026-06-03 13:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7rsc4m72v 2026-06-04 02:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjotiisf2s...

CVE-2025-15655

creationtimestamp| type| source ---|---|--- 2026-06-03 13:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7itomvd2d 2026-06-04 02:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjodno4l2l 2026-06-04 02:37:38+00:00| seen|...

CVE-2026-35077

creationtimestamp| type| source ---|---|--- 2026-06-03 13:15:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6wworug2d 2026-06-04 00:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcy4qrkm2q 2026-06-09 01:37:06+00:00| seen|...

CVE-2025-41259

creationtimestamp| type| source ---|---|--- 2026-06-03 13:05:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ezoyow2d 2026-06-04 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnhjzwy4m42p...

CVE-2026-25550

creationtimestamp| type| source ---|---|--- 2026-06-03 11:43:22+00:00| seen| https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618 2026-06-04 23:14:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mniquk35ws2f...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...