GHSA-6GQR-MX34-WH8R

creationtimestamp| type| source ---|---|--- 2026-04-24 03:15:39+00:00| published-proof-of-concept| Telegram/dFYuTuT6dlyI0G9HJyYD4PvIziWC5eOoZdg93OWAfIZB0...

CVE-2026-34587

creationtimestamp| type| source ---|---|--- 2026-04-24 03:15:39+00:00| published-proof-of-concept| Telegram/dFYuTuT6dlyI0G9HJyYD4PvIziWC5eOoZdg93OWAfIZB0...

CVE-2026-4126

creationtimestamp| type| source ---|---|--- 2026-04-24 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7bocnbhl2s...

Hostbill 资源管理错误漏洞

Hostbill is an automated management system for server hosting and cloud services provided by the Polish company Hostbill. Versions 2025-11-24 and 2025-12-01 of Hostbill contain resource management vulnerabilities. These vulnerabilities stem from issues with the Checkout Authentication Flow...

CVE-2026-31050

Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code...

CVE-2026-31050

Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code...

CVE-2026-31050

CVE-2026-31050 affects Hostbill versions 2025-11-24 and 2025-12-01 with a Cross-Site Scripting (XSS) flaw that could allow a remote attacker to execute arbitrary code. The available documents confirm the product and vulnerable versions, and the CVSSv3.1 base score is 4.9 (Medium) with Network att...

EUVD-2026-25422

Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code...

CVE-2026-31051

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component...

EUVD-2026-25424

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component...

CVE-2026-31051

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component...

CVE-2026-31052

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component...

Hostbill 跨站脚本漏洞

Hostbill is an automated management system for server hosting and cloud services provided by the Polish company Hostbill. The versions of Hostbill 2025-11-24 and 2025-12-01 contain cross-site scripting vulnerabilities. These vulnerabilities stem from cross-site scripting issues, which may allow...

PT-2026-34884

CVE-2026-31051 An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component https://t.co/UMnQEPtGP9...

CVE-2026-4132

creationtimestamp| type| source ---|---|--- 2026-04-22 11:16:16+00:00| published-proof-of-concept| Telegram/4Ce1p0rz1Dwr7V7nrROOlVFZDWJLAA0UiQHZa7V2KBLsc 2026-04-24 03:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7lq65bhb24...

CVE-2026-6776

creationtimestamp| type| source ---|---|--- 2026-04-21 17:18:10+00:00| seen| Telegram/GomAqAKioRw5ORwyc6ugTkWhk08fHowYPUM-Q49l2oeUgi0 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 02:01:24+00:00| seen|...

CVE-2026-33516

creationtimestamp| type| source ---|---|--- 2026-04-17 21:23:11+00:00| published-proof-of-concept| Telegram/GxkwnkIopWEGLbC11BdcbbYVRqOADIf4t7f5VnXFMKG7Kn8 2026-04-24 11:15:46+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mkaflhxcmk22...

OESA-2026-1951 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2026-5426 KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-41323

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:09+00:00| published-proof-of-concept| https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c 2026-04-24 05:45:50+00:00| seen|...