UBUNTU-CVE-2026-28799

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

CVE-2026-28799

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

CVE-2026-28799

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

EUVD-2026-10006

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

CVE-2026-3612

creationtimestamp| type| source ---|---|--- 2026-03-06 04:38:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeikqoufz2u...

CVE-2026-28726

creationtimestamp| type| source ---|---|--- 2026-03-06 04:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeibsbxsh2o...

CVE-2026-28486

creationtimestamp| type| source ---|---|--- 2026-03-06 02:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mge7w4w5mz2u...

Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the webhook process of the BlueBubbles plugin due to trusting the loopback remoteAddress without validating forwarding headers. An attacker...

PT-2026-23792

Name of the Vulnerable Software and Affected Versions Defuddle versions prior to 0.9.0 Description Defuddle contains a flaw in the findContentBySchemaText method within src/defuddle.ts. This method directly interpolates image src and alt attributes into an HTML string without proper escaping. An...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2026:0763-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0763-1 advisory. - CVE-2026-24491: heap-use-after-free in videotimer bsc1257981. - CVE-2026-24675: heap-use-after-free in...

ESAA-Security: An Event-Sourced, Verifiable Architecture for Agent-Assisted Security Audits of AI-Generated Code

AI-assisted software generation has increased development speed, but it has also amplified a persistent engineering problem: systems that are functionally correct may still be structurally insecure. In practice, prompt-based security review with large language models often suffers from uneven...

CVE-2026-28410

creationtimestamp| type| source ---|---|--- 2026-03-05 21:49:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgdrnyedoi2x...

CVE-2026-27944

creationtimestamp| type| source ---|---|--- 2026-03-05 13:48:56+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762 2026-03-05 17:58:43+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116177864137232689 2026-03-05 19:19:04+00:00...

CVE-2026-28539

creationtimestamp| type| source ---|---|--- 2026-03-05 10:09:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgckldj6pc2d...

CVE-2026-29052

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting XSS vulnerability in the Event Types of the HumHub Calendar module impacts users...

GHSA-9M84-WC28-W895

creationtimestamp| type| source ---|---|--- 2026-03-05 06:10:05+00:00| seen| https://gist.github.com/alon710/46efc12781b684d126409a3b14397427...

CVE-2026-3257

creationtimestamp| type| source ---|---|--- 2026-03-05 05:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgc4fjwxo42x 2026-03-05 10:08:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mgckine2q422...

CVE-2026-29052 HumHub Calendar Module: Stored XSS in Event Types

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting XSS vulnerability in the Event Types of the HumHub Calendar module impacts users...

EUVD-2026-9787

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities. Prior to version 1.8.11, a Stored Cross-Site Scripting XSS vulnerability in the Event Types of the HumHub Calendar module impacts users...

CVE-2026-29052

HumHub Calendar module (HumHub) contains a Stored XSS in Event Types affecting versions prior to 1.8.11. The vulnerability can be triggered when viewing events created by an administrative account; no user interaction is required and attack vector is network. The issue is fixed in version 1.8.11....