CVE-2026-24157

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t 2026-03-24 22:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n 2026-03-31 03:20:09+00:00| seen|...

USN-8121-1: Linux kernel (AWS FIPS) vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33848

creationtimestamp| type| source ---|---|--- 2026-03-24 07:08:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzdajm642s 2026-03-24 07:38:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2xr7ps22p...

CVE-2026-4021

creationtimestamp| type| source ---|---|--- 2026-03-24 00:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbw2jt5724 2026-03-24 00:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrchlqftr2e...

CVE-2025-60946

creationtimestamp| type| source ---|---|--- 2026-03-23 22:44:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr55apedj2p 2026-03-23 22:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr56ixpyt2d 2026-03-24 01:29:44+00:00| seen|...

CVE-2025-60949

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr52w6h442g 2026-03-23 22:44:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr5525dmv2u 2026-03-25 22:00:15+00:00| seen|...

WordPress Add Google Social Profiles to Knowledge Graph Box plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Add Google Social Profiles to Knowledge Graph Box versions = 1.0...

WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 26.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from a flaw in the order of cleaning operations for the about field in user profiles, which...

CVE-2026-4534

creationtimestamp| type| source ---|---|--- 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4534 2026-03-22 06:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmvrgvgvu2y 2026-03-22 06:42:03+00:00| seen|...

CVE-2026-4445

creationtimestamp| type| source ---|---|--- 2026-03-22 03:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmkkuesyn2t 2026-03-22 03:01:17+00:00| seen| https://bsky.app/profile/potato.software/post/3mhmkkvescb2u 2026-03-24 01:00:00+00:00| seen|...

GHSA-69FQ-XP46-6X23

creationtimestamp| type| source ---|---|--- 2026-03-22 00:39:26+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3mhmcnah4ja2t 2026-03-22 01:01:00+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mhmdttccr22u 2026-03-22 13:18:38+00:00| seen|...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

WordPress plugin Add Google Social Profiles to Knowledge Graph Box 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-1393: Cross-Site Request Forgery (CSRF)

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-33425 Discourse has inferable private group membership or existence via exclude_groups parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

EUVD-2026-13906

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

PT-2026-26709

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. Unauthenticated users can determine whether a specific user is...

CVE-2026-33346

creationtimestamp| type| source ---|---|--- 2026-03-19 21:21:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgwnrip2k2x 2026-03-19 21:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgyl6jwsr2y 2026-03-20 16:00:15+00:00| seen|...

PT-2026-26308

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...