CVE-2026-29136

creationtimestamp| type| source ---|---|--- 2026-04-02 10:35:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiz3x5tx72d...

An overview of ransomware threats in Japan in 2025 and early detection insights from Qilin cases

In 2025, a total of 134 ransomware incidents were reported in Japan, marking a 17.5% increase compared to 2024. Among these, 22 incidents were attributed to Qilin, representing 16.4% of the total. In 2025, Qilin ransomware was highly active. Looking ahead to 2026, unless there is significant...

EUVD-2026-18132

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

lightweight-msf

Lightweight-MSF !License: MIThttps://img.shields.io/badge...

CVE-2026-0686

creationtimestamp| type| source ---|---|--- 2026-04-02 09:15:50+00:00| seen| Telegram/mGlLp0izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA 2026-04-02 10:00:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3miix3yef632n 2026-04-08 14:30:08+00:00| seen|...

CVE-2026-5032

creationtimestamp| type| source ---|---|--- 2026-04-02 08:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miiri64r572s 2026-04-02 09:15:50+00:00| seen| Telegram/mGlLp0izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA 2026-04-08 15:30:11+00:00| seen|...

CVE-2026-0686 Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2026-0686 Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parseauthorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2026-30291

creationtimestamp| type| source ---|---|--- 2026-04-02 07:22:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miiobnfr6d2s...

CVE-2026-31027

creationtimestamp| type| source ---|---|--- 2026-04-02 07:16:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwycsxq2p...

CVE-2026-5319

creationtimestamp| type| source ---|---|--- 2026-04-02 06:26:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miil5jegki25...

CVE-2026-5321

creationtimestamp| type| source ---|---|--- 2026-04-02 06:21:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miikuiyug32z...

CVE-2026-5320

creationtimestamp| type| source ---|---|--- 2026-04-02 06:06:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miijznqgef2o 2026-04-02 07:15:36+00:00| seen| Telegram/W6jOpjyTj769pCXa-ZRWw2obquTHPJnxlg6AY1uAebMFs...

CVE-2026-26927

creationtimestamp| type| source ---|---|--- 2026-04-02 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-26927/ 2026-04-02 15:21:07+00:00| published-proof-of-concept| Telegram/613aY007LGHyW6rIrja4BsrlzuBvUbPzSCrjge10VR5WoE...

CVE-2026-5315

creationtimestamp| type| source ---|---|--- 2026-04-02 02:26:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mii5pwavgt25...

CVE-2026-5317

creationtimestamp| type| source ---|---|--- 2026-04-02 02:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mii55zfqot2d...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak itself. Keycloak has a security vulnerability that stems from sending a specially crafted POST request with an excessively long scope parameter to the OIDC token endpoint. This can lead to excessive resource...

PT-2026-29863

Name of the Vulnerable Software and Affected Versions leancrypto versions prior to 1.7.1 Description The leancrypto library, a cryptographic library focused on post-quantum cryptography, has an issue in the lc x509 extract name segment function. A cast from size t to uint8 t when handling the...

WordPress plugin Webmention 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-29686

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse authorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...