CVE-2026-22895

creationtimestamp| type| source ---|---|--- 2026-03-23 14:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

CERTFR-2026-ACT-012

creationtimestamp| type| source ---|---|--- 2026-03-23 14:33:22+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mhqbpels6z2c 2026-03-23 14:33:23+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116278978230489798 2026-03-23 20:10:00+00:00| seen|...

CVE-2019-25544

A flaw was found in Pidgin. Local attackers can exploit this denial of service vulnerability by providing an excessively long username string during account creation. This can cause the application to crash when joining a chat, leading to the application becoming unavailable. Mitigation Red Hat i...

CVE-2026-4580

creationtimestamp| type| source ---|---|--- 2026-03-23 12:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq4cdl5zg2d 2026-04-04 20:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miozkvwmgl2c...

CVE-2025-41007 SQL Injection in Cuantis

SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'search' parameter in the '/search.php' endpoint...

CVE-2026-4602

creationtimestamp| type| source ---|---|--- 2026-03-23 08:36:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpnqwag7l27 2026-03-24 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhri3l3h2r2p 2026-07-01 14:18:42+00:00| seen|...

CVE-2026-4579

creationtimestamp| type| source ---|---|--- 2026-03-23 08:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpmw2vjpc2d...

CVE-2026-33236

A flaw was found in NLTK Natural Language Toolkit, a suite of open-source Python modules for Natural Language Processing. The NLTK downloader does not validate subdir and id attributes when processing remote XML index files. A remote attacker can exploit this path traversal vulnerability by...

CVE-2026-4598

creationtimestamp| type| source ---|---|--- 2026-03-23 06:18:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhpg2gjcl525 2026-03-23 11:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpz3lhrtk2e...

CVE-2026-4570

creationtimestamp| type| source ---|---|--- 2026-03-23 04:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4570...

CVE-2026-4569

creationtimestamp| type| source ---|---|--- 2026-03-23 03:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4569...

Blinko 操作系统命令注入漏洞

Blinko is an open-source AI-based card-based note-taking app designed for users who want to quickly capture and organize fleeting ideas. Prior to Blinko 1.8.4, there was a vulnerability related to operating system command injection. This vulnerability stemmed from the MCP server’s creation...

Blinko 安全漏洞

Blinko is an open-source AI-based card-based note-taking application designed for users who want to quickly capture and organize fleeting ideas. Versions of Blinko prior to 1.8.4 contained security vulnerabilities. These vulnerabilities stemmed from unauthorized access to the/api/v1/comment/creat...

PT-2026-27216

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...

PT-2026-27217

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

PT-2026-27214

Name of the Vulnerable Software and Affected Versions Blinko versions prior to 1.8.4 Description A publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. The affected software is an AI-powered card note-taking project. The issue was...

CVE-2026-4551

creationtimestamp| type| source ---|---|--- 2026-03-22 16:34:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnxyhx3sw2k...

EUVD-2019-19930

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

CVE-2019-25606

creationtimestamp| type| source ---|---|--- 2026-03-22 15:09:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhntan233m2o...

CVE-2019-25594

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...