61313 matches found
CVE-2026-26276
creationtimestamp| type| source ---|---|--- 2026-03-06 04:00:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgegfntedm22...
CVE-2026-2589
creationtimestamp| type| source ---|---|--- 2026-03-06 02:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgec4zrymh2k...
CVE-2026-30861
creationtimestamp| type| source ---|---|--- 2026-03-06 02:38:40+00:00| published-proof-of-concept| https://github.com/Tencent/WeKnora/security/advisories/GHSA-r55h-3rwj-hcmg 2026-03-07 16:15:53+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30861 2026-03-...
CVE-2026-28481
creationtimestamp| type| source ---|---|--- 2026-03-06 02:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgebc6knig2y...
CVE-2026-29611
creationtimestamp| type| source ---|---|--- 2026-03-06 02:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgearkm5r52y 2026-03-07 12:02:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghrrylhy425...
CVE-2026-28486
creationtimestamp| type| source ---|---|--- 2026-03-06 02:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7w4w5mz2u...
CVE-2026-28484
creationtimestamp| type| source ---|---|--- 2026-03-06 01:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7h76scz2u 2026-03-06 10:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgf2judv3l2k 2026-03-06 10:01:31+00:00| seen|...
CVE-2026-25906
creationtimestamp| type| source ---|---|--- 2026-03-06 00:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mge37sqd562l...
PT-2026-23668
Name of the Vulnerable Software and Affected Versions WooCommerce versions 5.4.0 through 10.5.2 Description The WooCommerce WordPress plugin does not properly handle batch requests, potentially allowing unauthenticated users to execute administrative actions on non-store REST endpoints. This coul...
MarkUs 安全漏洞
MarkUs is an open-source Ruby on Rails and React web application used for submitting and grading student assignments. Versions of MarkUs prior to 2.9.4 contained a security vulnerability. This vulnerability stemmed from allowing course instructors to upload YAML files to create or update entities...
vito 安全漏洞
VitoDeploy is an open-source web application for server management and PHP application deployment. Versions of Vito before 3.20.3 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authorization checks during the workflow site creation process. This could allow a...
Parse Server 安全漏洞
Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that runs Node.js. There were security vulnerabilities in versions of Parse Server prior to 8.6.5 and 9.5.0-alpha.3. These vulnerabilities stemmed from the use of readOnlyMasterKey,...
CVE-2026-29084: Cross-Site Request Forgery (CSRF)
Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a...
Internet Routing Registry Daemon 授权问题漏洞
The Internet Routing Registry Daemon IRRd is a routing registry daemon. Versions of IRRd from 4.4.0 to 4.4.5 and from 4.5.0 to 4.5.1 had an authorization issue. This issue stemmed from the ability for attackers to manipulate the HTTP Host header in password reset or account creation requests,...
PT-2026-23680
Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests. Attackers can forge requests to the /public/admin/user/submitnew endpoint with user creation parameter...
CVE-2026-29789: Missing Authorization
Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an authenticated attacker with workflow write access in one project to create/manage...
openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:20318-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20318-1 advisory. Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea...
CVE-2026-29077
creationtimestamp| type| source ---|---|--- 2026-03-05 22:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgduyhhcoa2u...