CVE-2026-3105

creationtimestamp| type| source ---|---|--- 2026-02-24 20:28:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyyayknb2t 2026-02-24 20:29:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmyz2eui52k 2026-02-24 22:06:59+00:00| seen|...

CVE-2026-2798

creationtimestamp| type| source ---|---|--- 2026-02-24 20:10:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmxxfxrle2f...

CVE-2026-2846

creationtimestamp| type| source ---|---|--- 2026-02-24 16:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmm7a2lxm2m...

Arbitrary Code Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

GHSA-P33R-FQW2-RQMM ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

Incorrect Authorization

Overview apache-superset is a modern, enterprise-ready business intelligence web application. Affected versions of this package are vulnerable to Incorrect Authorization during the dataset creation process. An attacker can gain unauthorized access to restricted data by overwriting the SQL query o...

CVE-2025-13776

creationtimestamp| type| source ---|---|--- 2026-02-24 14:55:00+00:00| seen| https://cert.pl/en/posts/2026/02/CVE-2025-13776/ 2026-02-24 16:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmmv2zmgv2u...

CVE-2026-0400

creationtimestamp| type| source ---|---|--- 2026-02-24 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfmf7tw25a2z 2026-03-01 00:25:14+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi2hu2ac2x 2026-05-21 16:06:56+00:00| seen|...

CVE-2026-23982 Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to...

CVE-2026-23982

CVE-2026-23982 describes an Improper Authorization in Apache Superset where a low-privilege user can bypass data access controls during dataset creation by overwriting the SQL query of an existing dataset. Affected: Apache Superset

CVE-2026-23982 Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to...

CVE-2026-27826

creationtimestamp| type| source ---|---|--- 2026-02-24 11:57:17+00:00| published-proof-of-concept| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-7r34-79r5-rcc9 2026-03-10 19:10:06+00:00| seen| https://gist.github.com/alon710/318772c839d4af9a91549fceab76247e 2026-03-10...

CVE-2025-40538 SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires administrative privileges to abuse. On...

CVE-2025-40538 SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires administrative privileges to abuse. On...

CVE-2026-3064

creationtimestamp| type| source ---|---|--- 2026-02-24 06:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflj3k63cv2d...

CVE-2026-3065

creationtimestamp| type| source ---|---|--- 2026-02-24 05:56:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfliaovwdd2e...

CVE-2026-2873

creationtimestamp| type| source ---|---|--- 2026-02-24 03:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfl7iou6nm2e...

CVE-2026-24481

creationtimestamp| type| source ---|---|--- 2026-02-24 01:36:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzpfsdak2d 2026-02-24 01:51:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfl2kvocz72n 2026-02-24 20:20:10+00:00| seen|...

CVE-2026-25794

creationtimestamp| type| source ---|---|--- 2026-02-24 01:36:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzp77qxo2s 2026-02-24 04:52:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfleo4qk2v24 2026-03-02 09:40:10+00:00| seen|...

DEBIAN-CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...