CVE-2026-32989

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations,...

CVE-2026-32300

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Versions 1.41...

CVE-2026-27413

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This issue affects Profile Builder Pro: from n/a before 3.14.0...

CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2026-31836

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

CVE-2026-4314

The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the isDashboardOrProfileRequest method in the Menu Editor module using an insecure strpos check against $SERVER'REQUESTURI' to...

CVE-2026-22739

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from...

CVE-2018-25212

creationtimestamp| type| source ---|---|--- 2026-03-26 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxufumxob2n 2026-03-31 02:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mid4hm6okm2i...

CVE-2018-25213

creationtimestamp| type| source ---|---|--- 2026-03-26 14:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtrin5432s 2026-03-28 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3qntwlre2a...

CVE-2026-34070

creationtimestamp| type| source ---|---|--- 2026-03-26 13:13:29+00:00| published-proof-of-concept| https://github.com/langchain-ai/langchain/security/advisories/GHSA-qh6h-p6c9-ff54 2026-03-26 14:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77348 2026-03-26 21:00:04+00:00|...

CVE-2026-4862

creationtimestamp| type| source ---|---|--- 2026-03-26 10:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxg3ige7z2d 2026-03-27 00:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhysskofyy2w...

CVE-2026-32628

creationtimestamp| type| source ---|---|--- 2026-03-26 09:43:09+00:00| seen| https://bsky.app/profile/hackernoon.com/post/3mhxcv6kzsw2o 2026-03-27 15:52:46+00:00| seen| https://bsky.app/profile/leekthehack.bsky.social/post/3mi2hyuoag22e...

CVE-2025-15488

creationtimestamp| type| source ---|---|--- 2026-03-26 09:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxar3brtl23...

CVE-2025-15433

creationtimestamp| type| source ---|---|--- 2026-03-26 09:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxaiknqu62t...

CVE-2026-4849

creationtimestamp| type| source ---|---|--- 2026-03-26 07:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4849 2026-03-26 09:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxc6o4ckg2i...

CVE-2026-4838

creationtimestamp| type| source ---|---|--- 2026-03-26 06:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwytil3tk2s...

CVE-2026-4335

creationtimestamp| type| source ---|---|--- 2026-03-26 06:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwqyknpp2d...

CVE-2026-4329

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4329 2026-03-26 05:55:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhww5igem42s...

CVE-2026-33182

creationtimestamp| type| source ---|---|--- 2026-03-26 03:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwogg44gw2z 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo...