CVE-2026-28805

creationtimestamp| type| source ---|---|--- 2026-04-01 15:13:27+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-3gw8-3mg3-jmpc 2026-04-02 15:21:07+00:00| published-proof-of-concept| Telegram/613aY007LGHyW6rIrja4BsrlzuBvUbPzSCrjge10VR5WoE...

CVE-2026-34222

creationtimestamp| type| source ---|---|--- 2026-03-31 23:58:42+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-7429-hxcv-268m 2026-04-02 06:21:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miikujwojm2c 2026-04-03...

CVE-2026-34728

creationtimestamp| type| source ---|---|--- 2026-03-31 17:23:35+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-38m8-xrfj-v38x 2026-04-02 16:51:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijo3vyh242t 2026-04-02 17:37:38+00:00|...

CVE-2026-5279

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260402 2026-04-02 01:18:12+00:00| seen|...

CVE-2026-28687

creationtimestamp| type| source ---|---|--- 2026-03-30 07:02:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116316841599408182...

CVE-2026-25987

creationtimestamp| type| source ---|---|--- 2026-03-30 07:02:31+00:00| seen| https://infosec.exchange/users/certvde/statuses/116316841599408182...

CVE-2026-25983

creationtimestamp| type| source ---|---|--- 2026-03-30 07:02:30+00:00| seen| https://infosec.exchange/users/certvde/statuses/116316841599408182 2026-07-16 13:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqredwrqef2y...

CVE-2026-34528

creationtimestamp| type| source ---|---|--- 2026-03-28 19:03:25+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-x8jc-jvqm-pm3f 2026-03-28 19:03:25+00:00| published-proof-of-concept|...

EUVD-2026-16250

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB potential memory corruption. This is triggered by an MQTT everestexternal/nodered/connector/cmd/switchthreephaseswhilecharging message and results in Charger::sharedcontext / internalcontext...

CVE-2026-3215

creationtimestamp| type| source ---|---|--- 2026-03-25 18:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvodk3kkb2j...

CVE-2026-28877

creationtimestamp| type| source ---|---|--- 2026-03-25 02:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtz7xrmze2j 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-26 03:00:11+00:00| seen|...

CLSA-2026-1773782865 Update of alt-php

New microcode update packages from upstream up to 2026-02-21: - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10ver:0x0A00107A, cpuid:0x00A00F11ver:0x0A0011D5, cpuid:0x00A00F11ver:0x0A0011DE, cpuid:0x00A00F12ver:0x0A001238, cpuid:0x00A00F12ver:0x0A001247,...

MiracleLinux 9 : libvpx-1.9.0-10.el9_7 (AXSA:2026-324:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-324:02 advisory. libvpx: Heap buffer overflow in libvpx CVE-2026-2447 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...

CVE-2025-67041

creationtimestamp| type| source ---|---|--- 2026-03-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02 2026-03-11 11:00:58+00:00| seen| https://vulnerability.circl.lu/bundle/49b900ec-633f-4111-a614-2dc8b0b77752...

GHSA-77XJ-RRH3-WX3V `time_calibrator` was removed from crates.io due to malicious code

It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...

RUSTSEC-2026-0030 `time_calibrator` was removed from crates.io due to malicious code

It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...

CVE-2026-27596

creationtimestamp| type| source ---|---|--- 2026-03-02 23:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4herunk32n...

CVE-2025-48646

creationtimestamp| type| source ---|---|--- 2026-03-02 23:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4ebueqa62s...

CVE-2026-0013

creationtimestamp| type| source ---|---|--- 2026-03-02 23:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4ebmzg6h25 2026-05-31 05:03:54+00:00| seen| https://t.me/GithubRedTeam/86624...

CVE-2026-0006

creationtimestamp| type| source ---|---|--- 2026-03-02 23:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4ebfpu6f26 2026-03-03 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116162300417905448 2026-03-03 00:00:42+00:00| seen|...