CVE-2026-23404 apparmor: replace recursive profile removal with iterative approach

In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion when removing nested profiles, which can lead to kernel stack exhaustion and system crashes. Reproducer: $ pf='a'; for i=...

CVE-2026-23404

CVE-2026-23404 affects the Linux kernel AppArmor profile management. The issue arises from recursive profile removal in the AppArmor code path; nested profiles could trigger deep recursion, risking kernel stack exhaustion and system crashes. The connected documents confirm the root cause is the r...

CVE-2026-5251

creationtimestamp| type| source ---|---|--- 2026-04-01 05:21:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifwzxooid2q...

EUVD-2026-17745

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35037

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:31+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-cqgf-f4x7-g6wc 2026-04-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituyphtjk22 2026-04-06 19:29:09+00:00| see...

CVE-2026-34550

creationtimestamp| type| source ---|---|--- 2026-04-01 02:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifnaoztsh24...

CVE-2026-34555

creationtimestamp| type| source ---|---|--- 2026-04-01 02:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifn2pvkjf2i...

CVE-2026-4668

creationtimestamp| type| source ---|---|--- 2026-04-01 02:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmvdvqfb2s 2026-04-01 19:45:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihhd2kr7a2k...

CVE-2026-34548

creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...

CVE-2026-34547

creationtimestamp| type| source ---|---|--- 2026-04-01 02:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmdyrvnp24...

CVE-2026-34549

creationtimestamp| type| source ---|---|--- 2026-04-01 02:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifm52eyga22...

CVE-2026-34546

creationtimestamp| type| source ---|---|--- 2026-04-01 02:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miflzv36xf27...

CVE-2026-35057

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35057

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

CVE-2026-35057 XenForo Stored Cross-Site Scripting via Structured Text Mentions

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

PT-2026-29432

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

WordPress User Profile Builder - Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field vulnerability

WordPress User Profile Builder - Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.15.5 - Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary Post Author Reassignment via Avatar Field vulnerability discovered by type5afe in WordPress Plugin Profile...

CVE-2026-5214

creationtimestamp| type| source ---|---|--- 2026-03-31 23:21:09+00:00| published-proof-of-concept| Telegram/2Cqkqvtgaegci7UwxXD-qABu2YaVYQoLZQGlshG1KuvbS0 2026-03-31 23:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifcwsffwy2s 2026-04-01 03:07:04+00:00| seen|...

CVE-2026-34551

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference NPD in CIccTagLut16::Write can be triggered when processing a crafted ICC profile embedded in a TIFF and extracted during iccTiffDump. This issue has...

CVE-2026-34549

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior UB condition in IccUtil.cpp triggered by a crafted input profile. Under UndefinedBehaviorSanitizer, the issue is reported as invalid left shift...