CVE-2026-34042

creationtimestamp| type| source ---|---|--- 2026-03-31 04:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3midc3pcfpa2j 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0 2026-03-31 06:51:01+00:00| seen|...

CVE-2026-34591

creationtimestamp| type| source ---|---|--- 2026-03-31 03:49:17+00:00| published-proof-of-concept| https://github.com/python-poetry/poetry/security/advisories/GHSA-2599-h6xx-hpxp 2026-04-02 19:26:58+00:00| published-proof-of-concept| Telegram/7DVhAvDfvaCSFfrp-315YEAfd2kaZp9OZJgmE0wwvo2i8o...

Cross-site Scripting (XSS)

Overview baserproject/basercms is a Content management system based on CakePHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the blog post rendering process. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious...

SQL Injection

Overview baserproject/basercms is a Content management system based on CakePHP. Affected versions of this package are vulnerable to SQL Injection via the blog post process. An attacker can execute arbitrary SQL commands by supplying crafted input to the affected component. Remediation Upgrade...

CVE-2026-33995

creationtimestamp| type| source ---|---|--- 2026-03-31 00:18:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micvopkhfm22...

CVE-2026-33983

creationtimestamp| type| source ---|---|--- 2026-03-31 00:02:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micuqxubal2d...

PT-2026-29196

The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84. This is due to missing nonce validation on the 'aps options page' function. This makes it possible for unauthenticated attackers to update settings and inject...

CVE-2026-30285

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

CVE-2026-30285

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30285

CVE-2026-30285 concerns an arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0. The issue arises during the file import process, where attackers can overwrite critical internal files, potentially enabling arbitrary code execution or information exposure. The descripti...

PT-2026-29330

Name of the Vulnerable Software and Affected Versions Zora: Post, Trade, Earn Crypto version 2.60.0 Description An arbitrary file overwrite issue exists during the file import process. This allows attackers to overwrite critical internal files, which can result in arbitrary code execution or the...

Discourse 访问控制错误漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that can be exploited by an attacker to retrieve the content of posts, threa...

WordPress plugin Auto Post Scheduler 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-30521

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific interest rates. While the frontend interface prevents users from entering negative numbers, this...

PT-2026-29325

Name of the Vulnerable Software and Affected Versions SourceCodester Loan Management System version 1.0 Description A business logic issue exists due to improper server-side validation. The application allows administrators to create loan plans with specific interest rates. Although the frontend...

PT-2026-29224

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppb save avatar value function due to missing validation on a user controlled key...

CVE-2026-5157

creationtimestamp| type| source ---|---|--- 2026-03-30 23:55:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micufbyyal2i...

Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild

How TeamPCP are leveraging stolen secrets from the recent supply chain attacks to compromise cloud environments...

CVE-2026-32794

creationtimestamp| type| source ---|---|--- 2026-03-30 22:26:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3micpglbkr62m 2026-03-31 00:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micunskdpe27...