112642 matches found
CVE-2026-39467
creationtimestamp| type| source ---|---|--- 2026-04-21 10:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjyrfmdo7m2h 2026-04-21 11:16:33+00:00| published-proof-of-concept| Telegram/Kfu-jY0-fwjq6nikv0Y5FAaiWBVRI0K7iXQovwBJu867kaE...
CVE-2026-31013
creationtimestamp| type| source ---|---|--- 2026-04-21 10:01:15+00:00| seen| https://gist.github.com/pentestrox/a35cd5df1a5a84eabada897fc4ffcc79...
CVE-2026-40496
creationtimestamp| type| source ---|---|--- 2026-04-21 02:22:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxwfrp4xf2p 2026-04-21 03:18:08+00:00| seen| Telegram/y8A40ypWR-zTQL04UvuWU-fhawBkUz4Q7ssav8OQJXhAoc...
CVE-2026-41294
creationtimestamp| type| source ---|---|--- 2026-04-21 01:07:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxs7s6hh52c 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I 2026-04-27 23:07:07+00:00| seen|...
PT-2026-34008
Name of the Vulnerable Software and Affected Versions Tekton Pipelines versions 1.0.0 through 1.10.0 Description The git resolver in API mode sends the system-configured Git API token to a user-controlled 'serverURL' when the token parameter is omitted. A tenant with TaskRun or PipelineRun create...
PT-2026-34216
Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.1 Description An incomplete fix in the 'test.php' file allows for unsanitized input. While the wget path was secured using escapeshellarg, the file get contents and curl code paths remain unsanitized. Additionally,...
RHEL 9 : git-lfs (RHSA-2026:9434)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9434 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
WWBN AVideo 跨站请求伪造漏洞
WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the objects/configurationUpdate.json.php file, which protected the endpoint through...
PT-2026-41172
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF bypass exists in the validate url function located in backend/open webui/retrieval/web/utils.py. The function calls validators.ipv6ip, private=True, but because...
RHEL 9 : git-lfs (RHSA-2026:9436)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9436 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
RockyLinux 10 : delve (RLSA-2026:8842)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8842 advisory. crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-27137 net/url: Incorrect parsing of IPv6 host literals in net/url...
PT-2026-41173
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description A Server-Side Request Forgery SSRF issue exists in the process picture url function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the...
PT-2026-33973
Cross-Site Scripting XSS vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploit...
RHEL 9 : git-lfs (RHSA-2026:9439)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9439 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...
RHEL 10 : git-lfs (RHSA-2026:9435)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:9435 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...
RockyLinux 10 : go-rpm-macros (RLSA-2026:8840)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:8840 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...
CVE-2026-29648
creationtimestamp| type| source ---|---|--- 2026-04-20 22:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxk5zonx22p...
CVE-2026-0930
creationtimestamp| type| source ---|---|--- 2026-04-20 22:39:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjwe4hzm2p...
CVE-2026-5450
creationtimestamp| type| source ---|---|--- 2026-04-20 22:26:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj7fnnpm2q 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs 2026-04-28 15:01:17+00:00| seen|...