CVE-2026-6631

creationtimestamp| type| source ---|---|--- 2026-04-20 11:50:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwfohlxv22e 2026-04-20 13:16:52+00:00| published-proof-of-concept| Telegram/7GNSW27Y2N6zMsJzLht94-sDuqQRdO09nNnVciVhTSt0Y 2026-04-20 13:23:13+00:00| seen|...

CVE-2026-39371 RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests

RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" files could be invoked via GET requests, bypassing their intended HTTP method. In cookie-authenticated applications, this allowed cross-site GET navigations to trigger...

GHSA-74XM-6WGF-X37J

creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...

CVE-2026-33981

creationtimestamp| type| source ---|---|--- 2026-03-26 08:32:26+00:00| published-proof-of-concept| https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-58r7-4wr5-hfx8 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

CVE-2026-25001

creationtimestamp| type| source ---|---|--- 2026-03-25 20:50:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvxpbyn5425 2026-03-25 23:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw6z4ekhx25...

PGST PG107 安全漏洞

PGST PG107 is a wireless intelligent anti-theft alarm system developed by China’s PGST company. The version PGST PG107 1.25.05.hf contains a security vulnerability. This vulnerability stems from the weak security of the PF-50 1.2 key card, which may allow attackers to exploit code reassembly...

CVE-2025-67135

CVE-2025-67135 affects PGST PG107 Alarm System 1.25.05.hf via the PF-50 1.2 keyfob. The root cause is weak security in the keyfob enabling code replay attacks that compromise access control. Exploitation is not described in the provided documents; CVSSv3.1 indicates a critical impact (AV:N/AC:L/P...

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

CVE-2025-13818

creationtimestamp| type| source ---|---|--- 2026-02-06 13:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me72cltzy52l...

CVE-2026-1778

creationtimestamp| type| source ---|---|--- 2026-02-03 09:50:05+00:00| seen| https://gist.github.com/alon710/489aeb55e21e4d9cedb91bf1a9640a8b...

CVE-2026-24832

creationtimestamp| type| source ---|---|--- 2026-01-27 16:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6mr3kel2o...

CVE-2026-0622

creationtimestamp| type| source ---|---|--- 2026-01-20 17:50:04+00:00| seen| https://gist.github.com/Darkcrai86/da7c9ced33722b1fb5a01b77acfbe4f5 2026-01-22 05:06:55+00:00| seen| https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcyg33c7z224...

MiracleLinux 3 : pango-1.14.9-5AXS3 (AXSA:2009-50:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-50:01 advisory. Pango is a system for layout and rendering of internationalized text. Fixed bugs: CVE-2009-1194 Integer overflow in the pangoglyphstringsetsize function in...

CVE-2026-21223

creationtimestamp| type| source ---|---|--- 2026-01-16 22:50:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115907220915660437 2026-01-17 01:38:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcli34mgrn2x 2026-01-19 22:50:12+00:00| seen|...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.36.b17.AXS4 (AXSA:2011-50:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-50:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2010-4476 Unspecified vulnerability in the Java Runtime Environment JRE in Oracle...

CVE-2025-23145

creationtimestamp| type| source ---|---|--- 2025-12-12 13:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa77dk4m26...

CVE-2025-56110

creationtimestamp| type| source ---|---|--- 2025-12-11 18:45:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702415200356592...

CVE-2025-20385

creationtimestamp| type| source ---|---|--- 2025-12-04 14:50:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m767t3uk6e2b...

CVE-2025-11781

Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The affected firmware contains a hardcoded static authentication key. An attacker with local access to the device can extract this key e.g., by analysing the firmware image or memory dump and create valid firmware updat...