CVE-2026-45252

creationtimestamp| type| source ---|---|--- 2026-05-21 12:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegy5obdd2n...

CVE-2026-45254

creationtimestamp| type| source ---|---|--- 2026-05-21 12:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegvcyo7f2c...

CVE-2026-39461

creationtimestamp| type| source ---|---|--- 2026-05-21 12:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegsms3st2p...

CVE-2026-8685

creationtimestamp| type| source ---|---|--- 2026-05-21 12:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmegguekof2h...

CVE-2026-8486

creationtimestamp| type| source ---|---|--- 2026-05-21 12:25:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmeg2efjkj27...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the integration action URL process. An attacker can execute arbitrary API calls with system administrator privileges by exploiting path traversal in the integration action URL when authenticated with a...

CVE-2026-44072

creationtimestamp| type| source ---|---|--- 2026-05-21 10:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeavuv4hk2c 2026-06-01 00:01:28+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmpbzkd2n...

CVE-2026-44064

creationtimestamp| type| source ---|---|--- 2026-05-21 10:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme6xnze242p...

CVE-2026-44066

creationtimestamp| type| source ---|---|--- 2026-05-21 10:13:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme6p4e7a52k...

Malicious code in @budetzz/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2dbcccc761971dfc5f844f59f362fe32ee1e0b9a3cd91ddd4fc87be5c8b013a The package is published under the name @budetzz/libsignal-node, impersonating the well-known libsignal Signal-protocol library, but the homepage and...

CVE-2026-4858

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action...

CVE-2015-3717

creationtimestamp| type| source ---|---|--- 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-03...

CVE-2026-40165

creationtimestamp| type| source ---|---|--- 2026-05-21 02:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmdd56ia522r...

GHSA-G2XH-C426-V8MF

creationtimestamp| type| source ---|---|--- 2026-05-21 00:45:42+00:00| seen| https://gist.github.com/FuzzysTodd/4e10f5b327d09a37dc02a2a08f442f94...

PT-2026-42506

Name of the Vulnerable Software and Affected Versions Open ISES Tickets versions prior to 3.44.2 Description A reflected cross-site scripting issue exists in the patient w.php file. Authenticated attackers can inject arbitrary JavaScript by providing unsanitized values through the id and ticket i...

PT-2026-42580

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.5.0 and earlier Description The RSS Displayer block accepts a feed URL from page editors and fetches it server-side without proper validation. This lack of validation allows for redirect-to-internal bypasses, where an...

PT-2026-42686

Impact Some of the Surface Controllers in the CMS provide to support member related operations fail to validate redirect URLs, making Razor templates that derive 'RedirectUrl' from user-controlled query parameters vulnerable to malicious redirect attacks. Patches The issue is resolved in versions...

PT-2026-42585

Impact Some of the Surface Controllers in the CMS provide to support member related operations fail to validate redirect URLs, making Razor templates that derive 'RedirectUrl' from user-controlled query parameters vulnerable to malicious redirect attacks. Patches The issue is resolved in versions...

IINA 参数注入漏洞

IINA is an open-source modern macOS video player developed by IINA. Versions of IINA prior to 1.4.3 had a parameter injection vulnerability. This vulnerability stemmed from the lack of validation for the mpvoptions/input-commands parameter via the custom URL scheme iina://open. This allowed remot...

PT-2026-44133

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4.31 Description The parse function in SymfonyComponentHtmlSanitizerTextSanitizerUrlSanitizer utilized by UrlSanitizer::sanitize and any HtmlSanitizer configuration permitting links or media fails to filter Unicode...