CVE-2025-32313

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-208197

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress N7 | Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme N7 | Golf Club Sports & Events versions = 2.16.0...

OpenClaw Access Control Error Vulnerability

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from an Access Control Error vulnerability that stems from the @openclaw/voice-call plugin Telnyx webhook handler accepting unsigned inbound webhook requests when telnyx.publicKey is not configured, which can b...

FreeBSD : Gitlab -- vulnerabilities (102a03c9-1316-11f1-93ca-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 102a03c9-1316-11f1-93ca-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Mermaid sandbox impacts GitLab CE/EE Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-1725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-1662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowe...

GHSA-J8CJ-HW74-64JV

creationtimestamp| type| source ---|---|--- 2026-02-28 06:10:10+00:00| seen| https://gist.github.com/alon710/5ac3748589d1670a9668e97918f21f24 2026-02-28 06:29:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfvlwzbbao24...

PT-2026-22479

Name of the Vulnerable Software and Affected Versions wpForo Forum version 2.4.14 Description The software contains a stored cross-site scripting issue that permits authenticated subscribers to upload specially crafted SVG files as profile avatars. This is achieved through the avatar upload...

CVE-2026-3255

creationtimestamp| type| source ---|---|--- 2026-02-27 23:24:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu7hwlqs2x 2026-02-27 23:30:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfuuk6yvv62a...

CVE-2026-28370

creationtimestamp| type| source ---|---|--- 2026-02-27 05:20:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmajhfh2d 2026-02-27 05:20:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmz252f2s 2026-02-27 06:58:30+00:00| seen|...

CVE-2026-2694

The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'canedit' and 'candelete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with...

CVE-2026-1662

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint...

CVE-2026-27449

creationtimestamp| type| source ---|---|--- 2026-02-26 22:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfsapnhm662w 2026-02-26 23:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsd2w6jlm2e 2026-02-27 07:21:19+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release

Red Hat build of OpenTelemetry 3.9.0 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: The deprecated OpenCensus Receiver, which provided backward compatibility with the OpenCensus project for easier...

GHSA-VPCF-GVG4-6QWR

creationtimestamp| type| source ---|---|--- 2026-02-26 00:40:19+00:00| seen| https://gist.github.com/alon710/047ec00f4a4d15a45b489fce0a995744 2026-02-26 00:50:19+00:00| seen| https://gist.github.com/alon710/166e0bc3fefcdaa30e1841507d50e54c 2026-02-26 18:09:12+00:00| seen|...

EUVD-2026-8745

The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'canedit' and 'candelete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, and MDM operations. Versions of Fleet prior to 4.80.1 contained security...

WordPress The Events Calendar plugin <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API vulnerability

Improper Authorization to Authenticated Contributor+ Event/Organizer/Venue Update/Trash via REST API vulnerability discovered by type5afe in WordPress Plugin The Events Calendar versions = 6.15.16...

CVE-2026-2694

The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to an improper capability check on the 'canedit' and 'candelete' function in all versions up to, and including, 6.15.16. This makes it possible for authenticated attackers, with...