CVE-2026-41032

creationtimestamp| type| source ---|---|--- 2026-06-03 13:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7rsc4m72v 2026-06-04 02:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjotiisf2s...

CVE-2025-15655

creationtimestamp| type| source ---|---|--- 2026-06-03 13:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf7itomvd2d 2026-06-04 02:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngjodno4l2l 2026-06-04 02:37:38+00:00| seen|...

CVE-2026-35077

creationtimestamp| type| source ---|---|--- 2026-06-03 13:15:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6wworug2d 2026-06-04 00:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngcy4qrkm2q 2026-06-09 01:37:06+00:00| seen|...

CVE-2025-41259

creationtimestamp| type| source ---|---|--- 2026-06-03 13:05:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ezoyow2d 2026-06-04 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnhjzwy4m42p...

CVE-2026-25550

creationtimestamp| type| source ---|---|--- 2026-06-03 11:43:22+00:00| seen| https://gist.github.com/VAMorales/dde5b1c0415a8505ccd6fafdb095a618 2026-06-04 23:14:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mniquk35ws2f...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2026-8885

creationtimestamp| type| source ---|---|--- 2026-06-03 05:15:50+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnee4piqoh2c...

CVE-2026-21870

creationtimestamp| type| source ---|---|--- 2026-06-03 05:13:24+00:00| seen| https://bsky.app/profile/theresidentmachine.bsky.social/post/3mnedydo7z62r...

CVE-2026-7421

creationtimestamp| type| source ---|---|--- 2026-06-03 03:10:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne54cz3e32e 2026-06-03 23:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mngagm4t4t2t...

CVE-2026-9334

creationtimestamp| type| source ---|---|--- 2026-06-03 02:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne4fdfgs223...

CVE-2026-41412

creationtimestamp| type| source ---|---|--- 2026-06-03 02:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3yun5nu2g...

CVE-2026-9516

creationtimestamp| type| source ---|---|--- 2026-06-03 02:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3vbsygx2y 2026-06-03 07:15:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnekscgcm32i 2026-06-04 05:02:42+00:00| seen|...

CVE-2026-42507

creationtimestamp| type| source ---|---|--- 2026-06-03 02:41:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3iwbcgy25 2026-06-03 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2rtqtu32f 2026-06-08 13:20:20+00:00| seen|...

Server-side Request Forgery (SSRF)

Overview @wonderwhy-er/desktop-commander is a MCP server for terminal operations and file editing Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the readFileFromUrl function in filesystem.ts when processing the url argument. An attacker can access interna...

EUVD-2026-34037

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blendermcp/server.py of the component ZIP File Handler. The manipulation of the argument zipfileurl results in server-side request...

EUVD-2026-34036

A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blendermcp/server.py. The manipulation of the argument inputimageurl leads to injection. Remote exploitation of the attack is possible. The exploit...

WordPress plugin Passeum Ticketing 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

Desktop Commander MCP 安全漏洞

Desktop Commander MCP is an MCP server developed by Eduard Ruzga. Version 0.2.37 of Desktop Commander MCP contains a security vulnerability. This vulnerability stems from the handling of the url parameter in the readFileFromUrl function found in the src/tools/filesystem.ts file. This vulnerabilit...

RockyLinux 10 : podman (RLSA-2026:19017)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19017 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denia...