CVE-2026-2992

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the /wp-json/kivicare/v1/setup-wizard/clinic REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated...

CVE-2026-2992

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the /wp-json/kivicare/v1/setup-wizard/clinic REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated...

CVE-2026-2992 KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the /wp-json/kivicare/v1/setup-wizard/clinic REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated...

CVE-2026-32947

creationtimestamp| type| source ---|---|--- 2026-03-18 14:38:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhdpnlum2t2i 2026-03-20 06:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhu5qlpr62k...

CVE-2026-33230

creationtimestamp| type| source ---|---|--- 2026-03-18 11:48:31+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-gfwx-w7gr-fvh7 2026-03-20 23:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjpqabgms27...

UBUNTU-CVE-2026-23243

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite computes datalen from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, datalen can become negative and...

CVE-2025-71258

creationtimestamp| type| source ---|---|--- 2026-03-18 10:43:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-71258.yaml 2026-03-18 10:44:05+00:00| seen| https://swecyb.com/ap/users/116080658609901341/statuses/116249741149530242 2026-03-1...

CVE-2025-11158

creationtimestamp| type| source ---|---|--- 2026-03-18 10:34:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhdbyt663r2t 2026-03-20 06:33:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhhvhqorml2t 2026-05-25 01:07:08+00:00| seen|...

CVE-2026-22318

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22318 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-32265

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32265...

CVE-2026-33058

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33058 2026-03-18 16:34:17+00:00| seen| https://bsky.app/profile/cydave.bsky.social/post/3mhdw4uc4w225 2026-03-19 09:28:13+00:00| seen|...

CVE-2026-31938

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31938 2026-03-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116248296001564766 2026-03-18 04:30:30+00:00| seen|...

CVE-2026-2092

creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchte54ry2f...

CVE-2019-25520

creationtimestamp| type| source ---|---|--- 2026-03-18 00:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcast6wsr2w...

CVE-2025-55043

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...

CVE-2025-55043

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...

Parse Server 安全漏洞

Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that runs Node.js. There were security vulnerabilities in versions of Parse Server prior to 9.6.0-alpha.17 and 8.6.42. These vulnerabilities stemmed from the ability to override fields...

CVE-2026-33042: Improper Authentication

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.29 and 8.6.49, a user can sign up without providing credentials by sending an empty authData object, bypassing the username and password requirement. This allows the creati...

Mura 安全漏洞

Mura is a content management system developed by Mura Corporation. Versions of Mura 10.1.10 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the bundled package creation feature lacking CSRF token validation, which could lead to data leakage...

PT-2026-26081

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...