Blog.Admin 安全漏洞

Blog.Admin is a backend permission management system developed by the individual developer sonzhang, based on Vue.js. Versions of blog.admin v.8.0 and earlier have security vulnerabilities. These vulnerabilities stem from improper access control in the getinfobytoken API interface, which could...

CVE-2026-33664

creationtimestamp| type| source ---|---|--- 2026-03-26 23:20:03+00:00| seen| Telegram/8zEAgaRSdVOPVh8YiiaVjapuYDuCzradOizJ-8M58UocKc 2026-03-31 05:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midffuq3aw2v...

CVE-2026-33645

creationtimestamp| type| source ---|---|--- 2026-03-26 23:19:48+00:00| seen| Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0 2026-03-31 06:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midir6ogjx2v 2026-04-02 20:06:08+00:00| seen|...

CVE-2026-35632

creationtimestamp| type| source ---|---|--- 2026-03-26 21:49:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7xr2-q9vf-x4r5 2026-04-09 23:30:23+00:00| published-proof-of-concept| Telegram/n2dd6XRjJv9G8jt1S2EaZawu98TdZ3-sGq35ZGwXZFcMAwI 2026-04-16 09:37:10+00:00| seen|...

CVE-2026-33504

creationtimestamp| type| source ---|---|--- 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g 2026-04-08 07:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mixptt4jte2f...

CVE-2026-32357

Server-Side Request Forgery SSRF vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Server Side Request Forgery.This issue affects Simple Blog Card: from n/a through = 2.37...

CVE-2026-4616

A security flaw has been discovered in bolo-blog up to 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Performing a manipulation of the argument articleTitle results in cross site scripting. It is possible to initiate the...

Fake OpenClaw Token Giveaway Targets GitHub Devs with Wallet-Draining Scam

OX Security reveals a new phishing campaign targeting GitHub developers. Scammers use fake OpenClaw token giveaways to trick users into connecting and draining their crypto wallets...

Machine Learning Operations: Yesterday, Today, and Tomorrow

...

CVE-2026-29100

creationtimestamp| type| source ---|---|--- 2026-03-24 16:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsy57rte42f...

CVE-2026-29099

creationtimestamp| type| source ---|---|--- 2026-03-24 16:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhswzmyxwk2v...

CVE-2026-29102

creationtimestamp| type| source ---|---|--- 2026-03-24 15:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhsvvozsos2f...

Microsegmentation and Zero Trust: Control the Blast Radius by Design

...

Remote Code Execution (RCE)

tinacms is vulnerable to remote code execution. The vulnerability is due to improper handling of markdown content using the gray-matter package, which allows an attacker to execute arbitrary code by injecting malicious content into processed markdown files such as blog posts...

‘Get Down! Get Down! They’re Gonna See Us!’: Six Months of Hiding From ICE

A family in Chicago has been terrified to leave their apartment. Agents could be anywhere...

EUVD-2026-14672

A security flaw has been discovered in bolo-blog 까지 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Performing a manipulation of the argument articleTitle results in cross site scripting. It is possible to initiate the attac...

CVE-2026-4616

A security flaw has been discovered in bolo-blog up to 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Performing a manipulation of the argument articleTitle results in cross site scripting. It is possible to initiate the...

CVE-2026-4616

A security flaw has been discovered in bolo-blog up to 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Performing a manipulation of the argument articleTitle results in cross site scripting. It is possible to initiate the...

CVE-2026-4616 bolo-blog Article Title article cross site scripting

A security flaw has been discovered in bolo-blog up to 2.6.4. The affected element is an unknown function of the file /console/article/ of the component Article Title Handler. Performing a manipulation of the argument articleTitle results in cross site scripting. It is possible to initiate the...

CVE-2026-4616

CVE-2026-4616 affects bolo-blog 2.6.4, specifically the Article Title Handler component in /console/article/. The vulnerability arises from manipulating the articleTitle argument, enabling cross-site scripting. Exploitation is remote and an exploit has been publicly released; the project was info...