CVE-2026-32595

creationtimestamp| type| source ---|---|--- 2026-03-20 09:44:00+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-g3hg-j4jv-cwfr 2026-03-20 13:05:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilexmpip2n 2026-03-20 13:58:56+00:00|...

CVE-2026-31992

creationtimestamp| type| source ---|---|--- 2026-03-20 09:40:21+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhi7wbqiqx2m...

CVE-2026-33064

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Dereference in the /sdm-subscriptions endpoint. A remote attacker can cause the UDM service to panic and crash by sending ...

CVE-2026-33064 free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Dereference in the /sdm-subscriptions endpoint. A remote attacker can cause the UDM service to panic and crash by sending ...

CVE-2026-33064

CVE-2026-33064 (Free5GC UDM) affects Free5GC prior to 1.4.2. A crafted POST to /sdm-subscriptions with path traversal and a large JSON payload can trigger a nil pointer dereference in DataChangeNotificationProcedure (notifier.go), causing the UDM service to panic and crash. Impact is disruption o...

CVE-2026-22175

creationtimestamp| type| source ---|---|--- 2026-03-20 07:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhz7ovcr42i...

CVE-2026-4471

creationtimestamp| type| source ---|---|--- 2026-03-20 06:38:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhvsdgazz2d...

CVE-2026-33025

creationtimestamp| type| source ---|---|--- 2026-03-20 06:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhuj3n3tv2o...

CVE-2026-32950

creationtimestamp| type| source ---|---|--- 2026-03-20 06:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhtyu7eix2n...

CVE-2026-33024

creationtimestamp| type| source ---|---|--- 2026-03-20 06:01:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116259978430738520 2026-03-20 06:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhhtpbx2qi2n 2026-03-20 06:04:20+00:00| seen|...

CVE-2026-33013

creationtimestamp| type| source ---|---|--- 2026-03-20 05:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhtmfhsz72o...

CVE-2026-33025

AVideo is a video-sharing Platform. Versions prior to 8.0 contain a SQL Injection vulnerability in the getSqlFromPost method of Object.php. The $POST'sort' array keys are used directly as SQL column identifiers inside an ORDER BY clause. Although realescapestring was applied, it only escapes...

CVE-2026-33025

AVideo versions before 8.0 are affected by a SQL injection in getSqlFromPost() in Object.php, where $_POST['sort'] keys are used directly as ORDER BY identifiers. Although real_escape_string() is applied, it only escapes string-context chars and does not protect SQL identifiers. The issue is fixe...

CVE-2015-20115

creationtimestamp| type| source ---|---|--- 2026-03-20 04:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhmwhdcdv2i...

CVE-2026-4180

creationtimestamp| type| source ---|---|--- 2026-03-20 03:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhhkos5gem2w...

CVE-2026-30889

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a moderator could exploit insufficient authorization checks to access metadata of posts they should not have permission to view. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain...

CVE-2026-31805

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

EUVD-2026-13494

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...

CVE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing...