CVE-2026-23396 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23396 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28528

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

CVE-2025-23217 vulnerabilities

Vulnerabilities for packages: mitmproxy...

CVE-2026-5121

creationtimestamp| type| source ---|---|--- 2026-03-30 12:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmfwrwoo22 2026-03-31 17:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mienofpx762r 2026-03-31 17:24:25+00:00| published-proof-of-concept|...

CVE-2026-5034

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /editcostumer.php of the component Parameter Handler. This manipulation of the argument cosid causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-5128

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-34716

creationtimestamp| type| source ---|---|--- 2026-03-30 08:29:09+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-w4hp-w536-jg64 2026-03-31 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifa6vdvem2i...

CVE-2026-5031

A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely...

Code-Projects Accounting System SQL注入漏洞

Code-Projects Accounting System is an accounting system open sourced by Code-Projects. Version 1.0 of Code-Projects Accounting System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter cosid in the file/viewincostumer.php of the Component Paramete...

PT-2026-29168

--- CVE-2026-34377: Consensus Failure via Crafted V5 Authorization Data Summary A logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction's txid while providing invalid authorization data, a miner could cause...

Fedora: Security Advisory (FEDORA-2026-936a74ccc0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-29144

A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument cust id leads to cross site scripting. The attack may be performed from remote. The exploit...

SUSE: Security Advisory (SUSE-SU-2026:1062-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-23340

creationtimestamp| type| source ---|---|--- 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/ 2026-04-02 17:35:40+00:00| published-proof-of-concept| Telegram/NAca0faqmeM5cf-FioRAWlw9FKEwGdtSRa2UthmnXAOdewE 2026-05-05 20:00:00+00:00| seen|...

GHSA-Q2QC-744P-66R2 OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility

Summary sessionstatus sessionId resolution bypasses sandboxed session-tree visibility Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.11, = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details...

EUVD-2026-16717

AVideo: IDOR in uploadPoster.php Allows Any Authenticated User to Overwrite Scheduled Live Stream Posters and Trigger False Socket Notifications...

CVE-2026-32918

creationtimestamp| type| source ---|---|--- 2026-03-29 13:35:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bc7dwfu2r 2026-03-29 13:36:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bczm45o2w 2026-03-29 13:37:08+00:00| seen|...

CVE-2026-5042

creationtimestamp| type| source ---|---|--- 2026-03-29 13:15:14+00:00| published-proof-of-concept| Telegram/NO7FZZuUxfHd7B5nuheE0b5oaDsWf9usHusaCtuaPPn3P4 2026-03-30 21:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3micklluohm2f...

CVE-2026-5035

CVE-2026-5035 affects code-projects Accounting System 1.0, specifically the Parameter Handler’s file /view_work.php. The vulnerability arises from manipulation of the en_id argument, leading to a SQL injection. It is remotely exploitable and an exploit has been disclosed publicly. Multiple connec...

CVE-2026-5035

A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /viewwork.php of the component Parameter Handler. Such manipulation of the argument enid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...