CVE-2025-58669

creationtimestamp| type| source ---|---|--- 2026-04-01 22:28:06+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mihqgjumqp2c...

CVE-2026-34568

creationtimestamp| type| source ---|---|--- 2026-04-01 22:07:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x7wh-g25g-53vg 2026-04-01 22:27:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqezueu32j 2026-04-01 23:27:52+00:00| seen|...

GHSA-R33W-C82V-X5V7 CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Summary Vulnerability: Blogs Posts Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS - Stored Cross-Site Scripting via Unsanitized Blog Post Content in Blog Management Categories Description The application fails to properly sanitize user-controlled input wh...

CVE-2026-34567

creationtimestamp| type| source ---|---|--- 2026-04-01 22:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihp67z6nt2s 2026-04-01 22:06:50+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r33w-c82v-x5v7 2026-04-01 23:27:52+00:00| seen|...

CVE-2026-34564

creationtimestamp| type| source ---|---|--- 2026-04-01 22:02:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihoyfna3k2i 2026-04-01 22:04:54+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g4pp-fhgf-8653 2026-04-01 23:27:43+00:00| seen|...

CVE-2024-43253

creationtimestamp| type| source ---|---|--- 2026-04-01 22:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihouqxrhn2f...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the Request.post function. An attacker can cause excessive memory allocation by sending a specially crafted multipart request containing large non-file fields. Remediation Upgrade...

CVE-2026-34568 CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when creating or editing blog posts. An attacker can inject a...

openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage

Summary Refresh tokens are accepted as URL query parameters in the keyserver and telemetry server routes. Affected Code python opensslencryptserver/modules/keyserver/routes.py:214-215 opensslencryptserver/modules/telemetry/routes.py:90-91 async def refreshtoken request: Request, refreshtoken: str...

GHSA-4RH7-JWG9-M28M openssl-encrypt accepts refresh tokens as URL query parameters causing token leakage

Summary Refresh tokens are accepted as URL query parameters in the keyserver and telemetry server routes. Affected Code python opensslencryptserver/modules/keyserver/routes.py:214-215 opensslencryptserver/modules/telemetry/routes.py:90-91 async def refreshtoken request: Request, refreshtoken: str...

CVE-2026-34456

creationtimestamp| type| source ---|---|--- 2026-04-01 21:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihm36pb7h24 2026-04-01 23:27:18+00:00| seen| Telegram/bl6LC3S0UxxO5vDfC3lE4LaBC6ObKrhuhRcx8XqwmK5Cxg 2026-04-02 04:02:26+00:00| seen|...

CVE-2026-34159

creationtimestamp| type| source ---|---|--- 2026-04-01 21:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihlsaa2ul2j 2026-04-02 06:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijs2r4m327 2026-04-03 17:26:14+00:00| published-proof-of-concept|...

AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.php

Summary The AVideo onpublishdone.php endpoint in the Live plugin allows unauthenticated users to terminate any active live stream. The endpoint processes RTMP callback events to mark streams as finished in the database, but performs no authentication or authorization checks before doing so. An...

CVE-2026-34455

creationtimestamp| type| source ---|---|--- 2026-04-01 20:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkynlnrb2n 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ...

GHSA-C4XJ-X7P8-3X7Q AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All Users

Summary The AVideo endpoint objects/emailAllUsers.json.php allows administrators to send HTML emails to every registered user on the platform. While the endpoint verifies admin session status, it does not validate a CSRF token. Because AVideo sets SameSite=None on session cookies, a cross-origin...

CVE-2026-34747

creationtimestamp| type| source ---|---|--- 2026-04-01 20:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkgl3e3d2o 2026-04-01 23:27:18+00:00| seen| Telegram/bl6LC3S0UxxO5vDfC3lE4LaBC6ObKrhuhRcx8XqwmK5Cxg 2026-04-02 05:25:38+00:00| seen|...

CVE-2026-34990

creationtimestamp| type| source ---|---|--- 2026-04-01 18:47:29+00:00| published-proof-of-concept| https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp 2026-04-06 21:20:35+00:00| published-proof-of-concept| Telegram/MEpsfFR7A3mQ2dGKH0pRdtzvADr6R8o0dal6eRmpMO8wsk 2026-04-07...

CVE-2026-5310

creationtimestamp| type| source ---|---|--- 2026-04-01 18:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihdxzloro2d...

CVE-2026-34751

creationtimestamp| type| source ---|---|--- 2026-04-01 18:29:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mihd3wxy7w2m 2026-04-01 21:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihmn3nyzl2g 2026-04-02 05:26:16+00:00| seen|...

CVE-2026-30643

creationtimestamp| type| source ---|---|--- 2026-04-01 18:27:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihcxq4gmp2q 2026-04-02 07:15:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miinw2jjdo25 2026-04-06 16:00:15+00:00| seen|...