CVE-2026-33770

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the fixCleanTitle static method in objects/category.php constructs a SQL SELECT query by directly interpolating both $cleantitle and $id into the query string without using prepared statements or parameterized...

CVE-2026-33770 AVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id Variables

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the fixCleanTitle static method in objects/category.php constructs a SQL SELECT query by directly interpolating both $cleantitle and $id into the query string without using prepared statements or parameterized...

CVE-2026-33770

Summary: CVE-2026-33770 affects WWBN/AVideo up to version 26.0, where fixCleanTitle() in objects/category.php interpolates user-controlled data directly into a SQL query, enabling SQL injection when creating or renaming categories. The vulnerability stems from building the query with $clean_title...

CVE-2026-27877

creationtimestamp| type| source ---|---|--- 2026-03-27 16:03:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2ilk6erq2s...

CVE-2026-1496

creationtimestamp| type| source ---|---|--- 2026-03-27 15:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2i7xzklv2s 2026-03-27 17:22:21+00:00| seen| Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME...

CVE-2026-33044

creationtimestamp| type| source ---|---|--- 2026-03-27 15:48:13+00:00| published-proof-of-concept| https://github.com/home-assistant/core/security/advisories/GHSA-r584-6283-p7xc 2026-03-27 21:22:55+00:00| seen| Telegram/Gog278dWyh4lEZUplneDunVggYKWxHPgBiv3mkrQtX1ZGY 2026-03-28 19:35:35+00:00| see...

Allocation of Resources Without Limits or Throttling

Overview miraheze/ts-portal is a Portal for handling and managing the investigation lifecycle for Trust and Safety at the WikiTide Foundation Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the DPAAlreadyLive validation process. An...

GHSA-6FQ7-PGJ3-6CFP

creationtimestamp| type| source ---|---|--- 2026-03-27 15:17:36+00:00| seen| Telegram/LBnoZEkIgYZcAalPkuHtbpp5d2DNhQfVZICyQCgDXFXXQ...

CVE-2026-4620

creationtimestamp| type| source ---|---|--- 2026-03-27 15:17:14+00:00| seen| Telegram/svRbUAS3r6GAYzDJQh3Todl-Lk2he1i8bWMEx2GJpog2k 2026-03-27 16:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2ipzkusr2s 2026-04-02 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN89339669/...

CVE-2026-5024

creationtimestamp| type| source ---|---|--- 2026-03-27 15:04:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116301748482237182 2026-03-28 12:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306738692445946 2026-03-29 03:55:28+00:00| seen|...

CVE-2026-27860

creationtimestamp| type| source ---|---|--- 2026-03-27 12:32:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi24tiyi3523 2026-03-30 22:50:34+00:00| seen| https://gist.github.com/elchinsir/a50bb1cfa4daf45f28b65ae3f0eeb05a...

SUSE CVE-2019-25544

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat,...

BIT-DISCOURSE-2026-29072 Discourse missing permission check for policy creation in discourse-policy

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain...

CVE-2026-33559

WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user...

CVE-2026-4909

creationtimestamp| type| source ---|---|--- 2026-03-27 04:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhza6ryrj62j...

GHSA-6W95-QGC4-5JXF

creationtimestamp| type| source ---|---|--- 2026-03-27 03:18:19+00:00| seen| Telegram/hP7eImde7r4m7yMTucs6yRrjdEU7i69S7GlZXENsXqke8A...

GHSA-378W-XH68-QRC8

creationtimestamp| type| source ---|---|--- 2026-03-27 03:18:12+00:00| seen| Telegram/wovzpCQvp7hlTQxwTsDEYFJDESQHFA6mVe176dFHuk85of0...

GHSA-JFJG-VC52-WQVF

creationtimestamp| type| source ---|---|--- 2026-03-27 03:18:12+00:00| seen| Telegram/wovzpCQvp7hlTQxwTsDEYFJDESQHFA6mVe176dFHuk85of0...

CVE-2026-3112

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:09+00:00| seen| https://nvd.nist.gov/vuln/detail/CVE-2026-4274...

CVE-2015-1548

creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:00+00:00| seen| https://jvn.jp/en/jp/JVN83788689/ 2026-08-14 16:00:10+00:00| seen| https://t.me/purpsec/810 2026-08-15 00:00:12+00:00| seen| https://t.me/purpsec/810...