CVE-2026-3106

creationtimestamp| type| source ---|---|--- 2026-03-31 10:48:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midyuykuoa24 2026-03-31 11:17:40+00:00| seen| Telegram/-8jI6AiqCmQgWrggXH9YLwpKKzzq7by02yxwbxJ-KYwNVwI...

CVE-2026-5186

creationtimestamp| type| source ---|---|--- 2026-03-31 10:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midxggnifh2n...

GHSA-C4R5-FXQW-VH93

creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

GHSA-P322-V6VW-VRQ9

creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

GHSA-QH6H-P6C9-FF54

creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

GHSA-43FC-JF86-J433

creationtimestamp| type| source ---|---|--- 2026-03-31 03:36:57+00:00| seen| https://gist.github.com/nathan815/a203abbe4dc9e08de6d9c9cf04900d0f 2026-03-31 04:27:44+00:00| seen| https://gist.github.com/nathan815/3b2baf96f65648664c6b5bb0a19da82c 2026-04-21 11:51:12+00:00| seen|...

CVE-2025-32957

creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyy2rkto2j 2026-03-31 01:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micz5zuvuo2h 2026-03-31 03:10:50+00:00| seen|...

CVE-2026-33977

creationtimestamp| type| source ---|---|--- 2026-03-31 00:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micwd33frk2i...

aws-c-event-stream 安全漏洞

aws-c-event-stream is a C language implementation library for the event stream protocol, open-sourced by Amazon Web Services - Labs. Versions of aws-c-event-stream prior to 0.6.0 contain security vulnerabilities. These vulnerabilities stem from out-of-bounds writing in the stream decoder componen...

PT-2026-37384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Linux kernel where the ep free function in eventpoll.c may release the epi-ep eventpoll structure while it is still being accessed by another...

CVE-2026-32794

creationtimestamp| type| source ---|---|--- 2026-03-30 22:26:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3micpglbkr62m 2026-03-31 00:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micunskdpe27...

CVE-2026-4257

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3b722d27 2026-03-30 23:20:36+00:00| seen| Telegram/aYCyNSm85uFE8xgl3G3j-Sn1NnPkfaU1HaAlO581ff2GeJQ 2026-03-31 00:00:42+00:00| seen|...

GHSA-M983-V2FF-WQ65 LiveQuery protected field leak via shared mutable state across concurrent subscribers

Impact When multiple clients subscribe to the same class via LiveQuery, the event handlers process each subscriber concurrently using shared mutable objects. The sensitive data filter modifies these shared objects in-place, so when one subscriber's filter removes a protected field, subsequent...

CVE-2026-3775

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224 2026-04-01 02:24:47+00:00| seen|...

CVE-2026-4425

creationtimestamp| type| source ---|---|--- 2026-03-30 16:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2pnbenz2g 2026-04-02 11:57:35+00:00| seen| https://bsky.app/profile/thecybermind.co/post/3mij5nyg3mq2e...

CVE-2024-48408

creationtimestamp| type| source ---|---|--- 2026-03-30 16:00:22+00:00| seen| https://gist.github.com/Geobm/81155ee01d0d61794afd623f842d764a...

EUVD-2026-17084

A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...

CVE-2026-3321

A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...

CVE-2026-3321

A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...

CVE-2026-3321

CVE-2026-3321 describes an authorization bypass in ON24 Q&A chat, via a user-controlled key in the endpoint console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/. An unauthenticated attacker can enumerate event IDs and access the full Q&A history, exposing IDs, private URLs, messages, references, a...