CVE-2026-45315

creationtimestamp| type| source ---|---|--- 2026-05-09 08:02:50+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-m8f9-9whg-f4xr 2026-05-16 04:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlwxioao4w2c...

CVE-2025-15634

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

CVE-2026-7652

creationtimestamp| type| source ---|---|--- 2026-05-09 05:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfjwhj6lf2p 2026-05-10 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mljm6sv5v42x...

GHSA-MV93-W799-CJ2W

creationtimestamp| type| source ---|---|--- 2026-05-09 05:40:29+00:00| seen| https://gist.github.com/alon710/be4c0540ec919d713e0bd6ccf621615c...

Server-Side Request Forgery

Weblate is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing validation of repository URLs during project backup import, where Component.objects.bulkcreate bypasses Django fullclean validation and allows attacker-controlled repository URLs to be written into...

CVE-2026-8209

creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...

CVE-2025-69233

creationtimestamp| type| source ---|---|--- 2026-05-09 05:11:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfi74dpe725...

GHSA-3G76-F9XQ-8VP6

creationtimestamp| type| source ---|---|--- 2026-05-09 05:10:28+00:00| seen| https://gist.github.com/alon710/125ca2c976df983809333bd3a8522eed...

CVE-2026-25077

creationtimestamp| type| source ---|---|--- 2026-05-09 05:06:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfhw52n2w2g...

CVE-2025-15634

CVE-2025-15634: In HCL BigFix WebUI, a missing authorization flaw lets an authenticated user with LOW privileges view sensitive environmental information via direct URL access to an unauthorized page. Impact: confidentiality (environmental data) exposed; attack vector: network; complexity: low; r...

CVE-2025-15634 HCL BigFix WebUI is affected by a missing authorization vulnerability

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

CVE-2025-15634

A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized page...

CVE-2026-8207

creationtimestamp| type| source ---|---|--- 2026-05-09 04:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfh6k6yu52c...

CVE-2026-8208

creationtimestamp| type| source ---|---|--- 2026-05-09 04:24:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlffm7owej2p...

CVE-2026-44987

creationtimestamp| type| source ---|---|--- 2026-05-09 03:04:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfb5itfpr2n...

CVE-2026-44286

creationtimestamp| type| source ---|---|--- 2026-05-09 02:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfacn2qbq2v...

SUSE CVE-2026-39823

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS...

CVE-2026-44313

Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery SSRF vulnerability in the fetchTitleAndHeaders function allows authenticated users to make arbitrary HTTP requests to internal...

Linux Distros Unpatched Vulnerability : CVE-2026-42307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled wi...

HCL BigFix WebUI 安全漏洞

HCL BigFix WebUI is a web-based administration page from HCL India. A security vulnerability exists in HCL BigFix WebUI, which stems from an authorization gap that could result in an authenticated user without appropriate privileges accessing an unauthorized page to view sensitive environmental...