PT-2026-26308

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

USN-8098-3: Linux kernel vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-31898

creationtimestamp| type| source ---|---|--- 2026-03-18 12:41:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj4o4jp72s 2026-03-18 12:42:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj5oxa7f2u 2026-03-18 12:42:07+00:00| seen|...

DEBIAN-CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-3888

creationtimestamp| type| source ---|---|--- 2026-03-17 19:24:31+00:00| seen| https://t.me/ctinow/247297 2026-03-17 20:01:23+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhbrae5mtr62 2026-03-17 20:33:25+00:00| seen|...

USN-8096-4: Linux kernel (Real-time) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8094-2: Linux kernel vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes

Summary An authorization mismatch in the gateway let an authenticated caller with only operator.write use browser.request to reach browser profile management routes that persist configuration to disk. In practice, this exposed an admin-only configuration write primitive through /profiles/create...

GHSA-VMHQ-CQM9-6P7Q OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes

Summary An authorization mismatch in the gateway let an authenticated caller with only operator.write use browser.request to reach browser profile management routes that persist configuration to disk. In practice, this exposed an admin-only configuration write primitive through /profiles/create...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request. An attacker can modify or create browser profiles and persist unauthorized configuration changes by sending crafted requests to profile...

CVE-2026-22193

creationtimestamp| type| source ---|---|--- 2026-03-13 03:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mgvwdhmewg2r 2026-03-13 03:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116219631142137867 2026-03-18 03:20:09+00:00| seen|...

CVE-2026-32260

creationtimestamp| type| source ---|---|--- 2026-03-12 19:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32260 2026-03-12 20:48:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgvbjw2raa2u 2026-03-12 21:40:50+00:00| seen|...

CVE-2026-32141

creationtimestamp| type| source ---|---|--- 2026-03-12 08:19:27+00:00| published-proof-of-concept| https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f 2026-03-12 18:26:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mguzlvssyb2n 2026-03-12...

SUSE CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

EUVD-2026-10391

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder...

Out-of-bounds Write

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2026-30980

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack overflow in CIccBasicStructFactory::CreateStruct causing uncontrolled recursion/stack exhaustion and crash. This vulnerability is fixed in 2.3.1.5...

CVE-2026-31795 iccDEV has a stack buffer overflow write in CIccXform3DLut::Apply()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow write in CIccXform3DLut::Apply corrupting stack memory or crash. This vulnerability is fixed in 2.3.1.5...