60716 matches found
GHSA-44VG-5WV2-H2HG
creationtimestamp| type| source ---|---|--- 2026-03-14 02:40:05+00:00| seen| https://gist.github.com/alon710/1291af57a3f24c084d79b6036abb3239...
GHSA-RVV3-G6HJ-G44X
creationtimestamp| type| source ---|---|--- 2026-03-13 23:10:06+00:00| seen| https://gist.github.com/alon710/d2b6ee2c399fd3a4d218a600dd6d79d1...
CVE-2026-4092
creationtimestamp| type| source ---|---|--- 2026-03-13 22:40:05+00:00| seen| https://gist.github.com/alon710/fc0902837b8b38d00673edb8479ed2ac 2026-04-01 09:34:14+00:00| seen| https://bsky.app/profile/secqube.com/post/3migf6reszd2g...
CVE-2026-32720
creationtimestamp| type| source ---|---|--- 2026-03-13 21:40:05+00:00| seen| https://gist.github.com/alon710/b9663d5e263c3281f512bc473b89c55f 2026-03-14 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116226708412108149...
GHSA-5CXW-W2XG-2M8H
creationtimestamp| type| source ---|---|--- 2026-03-13 21:10:06+00:00| seen| https://gist.github.com/alon710/25afc6b7c80d9d4a2082df7705bf284f...
GHSA-VMHQ-CQM9-6P7Q OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes
Summary An authorization mismatch in the gateway let an authenticated caller with only operator.write use browser.request to reach browser profile management routes that persist configuration to disk. In practice, this exposed an admin-only configuration write primitive through /profiles/create...
CVE-2026-29079
Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting th...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the handling of temporary file creation and population in the sandboxed file system bridge. An attacker can write arbitrary data...
GHSA-MWV9-GP5H-FRR4
creationtimestamp| type| source ---|---|--- 2026-03-13 12:40:06+00:00| seen| https://gist.github.com/alon710/b0e82af683da479dad48c19fbd03a0f7...
CVE-2026-32600
creationtimestamp| type| source ---|---|--- 2026-03-13 12:04:10+00:00| published-proof-of-concept| https://github.com/simplesamlphp/xml-security/security/advisories/GHSA-r353-4845-pr5p 2026-03-22 03:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmmqf657d2w...
GHSA-4CM8-XPFV-JV6F
creationtimestamp| type| source ---|---|--- 2026-03-13 11:40:06+00:00| seen| https://gist.github.com/alon710/c2c8edafba318da203fe42ab46df2df5...
GHSA-XG2Q-62G2-CVCM
creationtimestamp| type| source ---|---|--- 2026-03-13 10:40:05+00:00| seen| https://gist.github.com/alon710/be322fbd1c6dbc2c5db3537c606b3df9...
CVE-2026-20163
creationtimestamp| type| source ---|---|--- 2026-03-13 10:24:08+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/116221373950139353 2026-03-24 10:34:06+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhsesgybsq2p 2026-03-25 07:00:14+00:00| seen|...
GHSA-GG5M-55JJ-8M5G
creationtimestamp| type| source ---|---|--- 2026-03-13 09:40:05+00:00| seen| https://gist.github.com/alon710/c7a26a3aa4c5be8cf9da1316183bceec...
GHSA-5FW2-8JCV-XH87
creationtimestamp| type| source ---|---|--- 2026-03-13 08:10:06+00:00| seen| https://gist.github.com/alon710/01c81fe8f05cb94cbb46a686e8fd31c8...
GHSA-2F24-MG4X-534Q
creationtimestamp| type| source ---|---|--- 2026-03-13 06:40:06+00:00| seen| https://gist.github.com/alon710/741d463a436134d071dd4a30bdde2bd7...
WordPress Social Icons Widget & Block plugin <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation vulnerability
Missing Authorization to Authenticated Subscriber+ Sharing Configuration Creation vulnerability discovered by darkmode in WordPress Plugin Social Icons Widget & Block by WPZOOM versions = 4.5.8...
CVE-2025-57849
CVE-2025-57849 describes a container privilege escalation in certain Fuse images caused by the /etc/passwd file being created with group-writable permissions during build time. In affected containers, a non-root user who can run commands could use root-group membership to modify /etc/passwd, enab...