CVE-2026-33046

creationtimestamp| type| source ---|---|--- 2026-03-24 00:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrdc4ijxv24...

SUSE CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-4056

creationtimestamp| type| source ---|---|--- 2026-03-24 00:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrcescxmk2r...

concretecms 资源管理错误漏洞

ConcreteCMS is an open-source content management system developed by Concrete. Version 9.4.7 of ConcreteCMS contains a vulnerability related to resource management. This vulnerability stems from improper memory management during the creation of zip archives by the file manager component, which ma...

Apache Artemis 安全漏洞

Apache Artemis is a messaging broker software developed by the Apache Foundation. Versions of Apache Artemis such as 2.52.0 and earlier, as well as Apache ActiveMQ Artemis versions like 2.44.0 and earlier, have security vulnerabilities. These vulnerabilities stem from improper authorization, whic...

CVE-2026-33634

creationtimestamp| type| source ---|---|--- 2026-03-23 22:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5vaikg22i 2026-03-24 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116281208959546737 2026-03-24 00:00:42+00:00| seen|...

CVE-2026-23482

creationtimestamp| type| source ---|---|--- 2026-03-23 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5puj2272f 2026-04-27 12:07:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-23482.yaml...

CVE-2026-32066

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53nxmet2n 2026-03-23 23:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr637lvre26...

CVE-2026-32299

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53alsvy2q 2026-03-25 02:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhtzo455hr2i...

CVE-2025-60949

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr52w6h442g 2026-03-23 22:44:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr5525dmv2u 2026-03-25 22:00:15+00:00| seen|...

CVE-2026-32276

creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4f4hwqo2c 2026-03-23 22:31:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fviqoh2f 2026-03-23 23:34:10+00:00| seen|...

CVE-2026-32902

creationtimestamp| type| source ---|---|--- 2026-03-23 22:29:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4cx7tpn2e 2026-03-23 23:29:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr7ngsypm2g...

CVE-2026-33679

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:39+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-g9xj-752q-xh63 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33679...

CVE-2026-23486

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

EUVD-2026-14545

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23882 Blinko: Admin RCE - MCP Server Command Injection

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

EUVD-2026-14544

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

CVE-2026-23488

Blinko is affected prior to version 1.8.4. The /api/v1/comment/create endpoint allows unauthorized posting of comments to any note (including private ones), and /api/v1/comment/list allows unauthorized viewing of comments on all notes. The issue is fixed in version 1.8.4. CVSS v4.0 base score 6.9...

CVE-2026-23488 Blinko: multiple interfaces in the comment feature allow unauthorized access

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...