CVE-2026-32926

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 00:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihyoumk472s 2026-04-02 01:18:12+00:00| seen| Telegram/Bkkez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48...

CVE-2025-13855

creationtimestamp| type| source ---|---|--- 2026-04-01 03:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifp7aucs22m 2026-04-01 03:17:49+00:00| published-proof-of-concept| Telegram/rQGGJNosiE90GfC4CPODN8OMH2HUk0rxa4zVhsu5hB7e0 2026-04-03 14:40:10+00:00| seen|...

CVE-2026-34548

creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...

CVE-2026-5237

creationtimestamp| type| source ---|---|--- 2026-04-01 01:15:30+00:00| published-proof-of-concept| Telegram/I7gM78d3mp9wugorspZkHmlDKuo-8DymFEq-4a44ip7mrow 2026-04-01 02:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifosvbro624...

Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Summary Ash.Type.Module.castinput/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has ...

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user input when creating or editing blog articles in the category section, which could lea...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a flaw in differential encoding validation, potentially leading to cyclic creation...

aiohttp 注入漏洞

Aiohttp is an open-source framework developed by aio-libs, used for asynchronous HTTP client/server interactions with asyncio and Python. Versions of AIOHTTP prior to 3.13.4 had a injection vulnerability. This vulnerability stemmed from the possibility that attackers could control the reason...

GHSA-FF66-236V-P4FG

creationtimestamp| type| source ---|---|--- 2026-03-31 23:20:56+00:00| seen| Telegram/8TNuFRjRJBw5r6zwiOXWdT-cqnzTtiBnsbsFB7NS1OTWS8...

CVE-2026-2351

creationtimestamp| type| source ---|---|--- 2026-03-31 22:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mifbjmitr62x...

GHSA-677C-XV24-CRGX baserCMS is Vulnerable to Cross-site Scripting

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

baserCMS is Vulnerable to Cross-site Scripting

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

EUVD-2026-17269

baserCMS is Vulnerable to Cross-site Scripting...

CVE-2026-5211

creationtimestamp| type| source ---|---|--- 2026-03-31 21:19:34+00:00| seen| Telegram/OA0BhF0tC6EPmRi9BAj0aaRm3q83l75bwQVc9b2koDj48CY 2026-04-01 05:05:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifw6l7rru2t...

CVE-2026-3570

creationtimestamp| type| source ---|---|--- 2026-03-31 20:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mif2szu53t2h...

CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTHPASSWORDVALIDATORS setting which defaults to an empty list, i.e., no specific...

CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTHPASSWORDVALIDATORS setting which defaults to an empty list, i.e., no specific...

CVE-2026-2275

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA 2026-04-01 06:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mig2peqfxt2h 2026-04-04 05:36:38+00:00| seen|...

CVE-2026-3546

creationtimestamp| type| source ---|---|--- 2026-03-31 18:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mieu4hq3rv2k...

CVE-2026-5087

creationtimestamp| type| source ---|---|--- 2026-03-31 17:51:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mieqjpuhg62p 2026-04-03 21:17:42+00:00| published-proof-of-concept| Telegram/qTocgF1bA6EikMAxrpKqC2AQPtdVVaE6KTy64KQmK5LJ1E...