BIT-DISCOURSE-2026-28227 Discourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_category

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users can publish topics into staff-only categories via the publishtocategory topic timer, bypassing authorization checks. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known...

BIT-DISCOURSE-2026-27152 DIscourse has DM communication-preference bypass when adding members

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-preference bypass when adding members via Chat::AddUsersToChannel — a user could add targets who have blocked/ignored/muted them to an existing DM channel, bypassing per-recipien...

CVE-2026-3351

creationtimestamp| type| source ---|---|--- 2026-03-03 12:54:05+00:00| published-proof-of-concept| https://github.com/canonical/lxd/security/advisories/GHSA-crmg-9m86-636r 2026-03-03 16:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg66d5ziry2v 2026-03-04 20:40:05+00:00| see...

CVE-2026-3437

creationtimestamp| type| source ---|---|--- 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-04 2026-03-03 20:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6lx4luzy2d 2026-03-04 07:30:26+00:00| seen|...

GHSA-HJVP-QHM6-WRH2

creationtimestamp| type| source ---|---|--- 2026-03-03 10:10:08+00:00| seen| https://gist.github.com/alon710/809209c735b2cb40b1867eb79cc22949...

GHSA-FGVX-58P6-GJWC

creationtimestamp| type| source ---|---|--- 2026-03-03 09:40:09+00:00| seen| https://gist.github.com/alon710/f004b3a13a4436b9948f6c5897ca277d...

CVE-2026-20423

creationtimestamp| type| source ---|---|--- 2026-03-03 09:08:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6 2026-03-03 18:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6dwk3s6z2u...

CVE-2026-1876

creationtimestamp| type| source ---|---|--- 2026-03-03 07:54:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg5c3ad2fx2k 2026-03-03 08:11:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg5d2v4oaq2z 2026-03-03 11:00:00+00:00| seen|...

CVE-2026-1875

creationtimestamp| type| source ---|---|--- 2026-03-03 07:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116164069291017489 2026-03-03 07:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg5aqudf2t2n 2026-03-03 07:56:32+00:00| seen|...

GHSA-JMM5-FVH5-GF4P

creationtimestamp| type| source ---|---|--- 2026-03-03 06:40:08+00:00| seen| https://gist.github.com/alon710/a29701acb65476eb81b4f986433552ab...

GHSA-HWPQ-RRPF-PGCQ

creationtimestamp| type| source ---|---|--- 2026-03-03 04:40:09+00:00| seen| https://gist.github.com/alon710/6d1585c6fadbfa0eb477c8b403bc53c9 2026-03-03 04:55:35+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mg4y3rg5jw25...

CVE-2026-2448

creationtimestamp| type| source ---|---|--- 2026-03-03 04:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116163361394594510 2026-03-03 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg4wowxu2425 2026-03-03 07:26:23+00:00| seen|...

CVE-2026-2269

creationtimestamp| type| source ---|---|--- 2026-03-03 04:20:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4w4wrk6b2e...

GHSA-FQCM-97M6-W7RM

creationtimestamp| type| source ---|---|--- 2026-03-03 04:10:19+00:00| seen| https://gist.github.com/alon710/835a94fe78aca52e1d27bef34cfc24c6...

GHSA-R65X-2HQR-J5HF

creationtimestamp| type| source ---|---|--- 2026-03-03 02:10:09+00:00| seen| https://gist.github.com/alon710/b1980301960b0266a56628c923a2875f...

GHSA-2FGQ-7J6H-9RM4

creationtimestamp| type| source ---|---|--- 2026-03-03 01:40:09+00:00| seen| https://gist.github.com/alon710/8e44bef06c4a9145debeba3577194d21...

CVE-2026-3337

creationtimestamp| type| source ---|---|--- 2026-03-03 00:35:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4jlehr2u2e 2026-03-03 18:47:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mg6gmajx7a2w 2026-03-05 20:43:45+00:00| seen|...

OSV-2025-1075 Stack-use-after-return in mark_alt_bonds_and_taut_groups

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488729177 Crash type: Stack-use-after-return READ 2 Crash state: markaltbondsandtautgroups CreateINChI MakeOneInChIOutOfStrFromINChI...

Django 安全漏洞

Django is a set of open-source web frameworks based on the Python language, developed by the Django Foundation. This framework includes an object-oriented mapper, view system, template system, etc. Versions prior to Django 6.0.3, 5.2.12, and 4.2.29 contain security vulnerabilities. These...

Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exist...