GHSA-C4P7-RWRG-PF6P

creationtimestamp| type| source ---|---|--- 2026-03-12 03:40:05+00:00| seen| https://gist.github.com/alon710/b03cab59ac9b3af949ff7e9d16d01a05...

CVE-2026-3922

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgvfll6xhz2c 2026-03-16 00:00:00+00:00|...

GHSA-78CV-MQJ4-43F7

creationtimestamp| type| source ---|---|--- 2026-03-12 00:10:06+00:00| seen| https://gist.github.com/alon710/d5c9749169bfe3ab317a60240bc7470c 2026-04-03 05:15:36+00:00| published-proof-of-concept| Telegram/pXUM2jaw9GgU28Sl0meXOcFoAiVepufvCfRhEfvGcf7OCXo...

Honeywell IQ4x 访问控制错误漏洞

The Honeywell IQ4x is a series of network controllers within the building automation systems developed by the American company Honeywell. The Honeywell IQ4x has a vulnerability related to access control, which stems from the default configuration where authentication is not enabled. This...

CVE-2026-3611: Missing Authentication for Critical Function

The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest level 100 context, granting read/write...

CVE-2026-3967

creationtimestamp| type| source ---|---|--- 2026-03-11 23:16:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3967...

CVE-2026-2808

creationtimestamp| type| source ---|---|--- 2026-03-11 23:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2808...

CVE-2026-31976

creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:05+00:00| seen| https://gist.github.com/alon710/74a8a12bf6cb699bbfaf1a99d2e4e0d0 2026-03-12 04:30:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116214322775110049...

GHSA-F8Q5-H5QH-33MH

creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:05+00:00| seen| https://gist.github.com/alon710/74a8a12bf6cb699bbfaf1a99d2e4e0d0...

CVE-2026-3961

creationtimestamp| type| source ---|---|--- 2026-03-11 21:16:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3961...

GHSA-9JFH-9XRQ-4VWM

creationtimestamp| type| source ---|---|--- 2026-03-11 20:10:06+00:00| seen| https://gist.github.com/alon710/42f2baf7f8222d8e21a959d90dfc0bba...

CVE-2026-32106

StudioCMS (versions before 0.4.3) has an inconsistent RBAC check: REST API createUser uses string-based checks that only block owner, while the Dashboard API uses rank-index comparison. This allows an admin to create peer-admin accounts via REST, enabling privilege proliferation. The issue is fix...

GHSA-3WF5-G532-RCRR

creationtimestamp| type| source ---|---|--- 2026-03-11 19:40:05+00:00| seen| https://gist.github.com/alon710/50660dc4d55027714a8cd550ac80fb4f...

CVE-2026-3951

creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3951...

CVE-2026-31863

creationtimestamp| type| source ---|---|--- 2026-03-11 18:10:06+00:00| seen| https://gist.github.com/alon710/2f5ac9f201724311bd0bb59616acb73c...

GHSA-VV3H-7QWR-722V

creationtimestamp| type| source ---|---|--- 2026-03-11 18:10:06+00:00| seen| https://gist.github.com/alon710/2f5ac9f201724311bd0bb59616acb73c...

CVE-2026-20162

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...

CVE-2026-20162

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...

CVE-2026-20162

Summary: CVE-2026-20162 is a Stored XSS in Splunk Enterprise before versions 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform before 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123. A low-privileged user can abuse the View creation endpoint (/manager/launcher/data/ui/views/_n...

CVE-2026-20162 Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a malicious payload when creating a Vie...