UBUNTU-CVE-2026-4277

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

UBUNTU-CVE-2026-4292

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-25344

creationtimestamp| type| source ---|---|--- 2026-04-07 12:30:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mivrsrts472c...

CVE-2026-5642

A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Handler. This manipulation of the argument Name causes improper authorization. It ...

CVE-2026-34899

creationtimestamp| type| source ---|---|--- 2026-04-07 10:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mivkku23dp2j...

shadowforge

ShadowForge "Trust no one. Suspect ev...

CVE-2026-39846

creationtimestamp| type| source ---|---|--- 2026-04-07 09:16:34+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-phhp-9rm9-6gr2 2026-04-07 23:21:25+00:00| seen| Telegram/ob3ye0FCdfhceb6CimILWC3jRIWmZERTbGMc-OQRsW6HR0 2026-04-08 00:24:24+00:00| seen...

WordPress wpForo Forum plugin <= 2.4.16 - Authenticated (Subscriber+) Arbitrary File Deletion via Post Body vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via Post Body vulnerability discovered by WordFence in WordPress Plugin wpForo Forum versions = 2.4.16...

CVE-2025-57834

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv462gvya2s 2026-04-08 03:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mixcgodylv2q 2026-05-10 20:00:00+00:00| seen|...

CVE-2025-54328

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv45ttzr425 2026-04-07 08:06:44+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mivd3t5d2m2o 2026-04-08 08:07:19+00:00| seen|...

CVE-2026-20432

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miv44zzap62i 2026-04-07 14:52:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzrg66ve2j 2026-04-07 15:20:46+00:00| seen|...

CVE-2026-33866

creationtimestamp| type| source ---|---|--- 2026-04-07 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-33865/...

CVE-2026-32533

creationtimestamp| type| source ---|---|--- 2026-04-07 03:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miutn6m6mq2k...

CVE-2026-39324

creationtimestamp| type| source ---|---|--- 2026-04-07 03:00:08+00:00| published-proof-of-concept| Telegram/c-9nM9mslhGNLfW7QsPDgkIMfnwsyr-9epKeORTrIU88Ta0 2026-04-07 03:00:11+00:00| published-proof-of-concept| Telegram/HzOqBhluyLlt9yC4XLrvomtg4oZEtrGKU8ieYWYpvETezc 2026-04-07 19:35:16+00:00| see...

CVE-2026-39360

creationtimestamp| type| source ---|---|--- 2026-04-07 02:06:49+00:00| published-proof-of-concept| https://github.com/rustfs/rustfs/security/advisories/GHSA-mx42-j6wv-px98 2026-04-07 20:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwndj2ph62d...

CVE-2026-5688

creationtimestamp| type| source ---|---|--- 2026-04-07 01:16:43+00:00| published-proof-of-concept| Telegram/NRb0QMHrG2YdeQFhFIBC199wVAoJ1DSSMrQ5jp3E6gcHNig 2026-04-07 02:36:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuqmwcrrt2t...

PT-2026-30869

Name of the Vulnerable Software and Affected Versions Django versions 6.0 through 6.0.3, 5.2 through 5.2.12, and 4.2 through 4.2.29 Description A flaw exists in the permission validation process for inline model instances within GenericInlineModelAdmin when handling forged POST data. This could...

Signature Placement in Post-Quantum TLS Certificate Hierarchies: An Experimental Study of ML-DSA and SLH-DSA in TLS 1.3 Authentication

Post-quantum migration in TLS 1.3 should not be understood as a flat substitution problem in which one signature algorithm is replaced by another and deployment cost is inferred directly from primitive-level benchmarks. In certificate-based authentication, the practical effect of a signature fami...

PT-2026-30870

Name of the Vulnerable Software and Affected Versions Django versions 6.0 through 6.0.3 Django versions 5.2 through 5.2.12 Django versions 4.2 through 4.2.29 Django versions 5.0.x and earlier Django versions 4.1.x and earlier Django versions 3.2.x and earlier Description An issue was discovered...

CVE-2024-36058

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter biblist in /cgi-bin/koha/opac-sendbasket.pl, allowing library users to read arbitrary data from the database...