CVE-2026-33418

creationtimestamp| type| source ---|---|--- 2026-03-24 23:15:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdlkhlx2c 2026-03-25 11:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhuyxhheum27...

CVE-2026-27784

creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtonc4ptz27 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...

CVE-2026-32647

creationtimestamp| type| source ---|---|--- 2026-03-24 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtojbwq6o2m 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 13:27:30+00:00| seen|...

CVE-2026-3912

creationtimestamp| type| source ---|---|--- 2026-03-24 22:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnm24gdn2g...

CVE-2026-4371

creationtimestamp| type| source ---|---|--- 2026-03-24 22:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlg2nje62s 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-24151

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl7t433a2r 2026-03-24 22:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtljvmjbp2s 2026-03-26 00:00:14+00:00| seen|...

CVE-2026-3889

creationtimestamp| type| source ---|---|--- 2026-03-24 21:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtktfglie24 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-33891

creationtimestamp| type| source ---|---|--- 2026-03-24 20:59:01+00:00| published-proof-of-concept| https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx 2026-03-27 21:39:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33flm56p27 2026-03-27...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the Windows cleanup routine when a crafted profile name containing PowerShell metacharacters is used. An attacker can execute arbitrary PowerShell commands with the privileges of the application process user by...

GHSA-P8MM-644P-PHMH PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Summary PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a needle derived from the profile path. In v0.8.4, that string interpolation escapes...

CVE-2026-20687

creationtimestamp| type| source ---|---|--- 2026-03-24 19:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77047 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260325 2026-03-25 03:00:31+00:00| seen|...

USN-8121-1 linux-aws-fips vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-6 linux-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8098-5 linux-iot, linux-kvm vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33872

creationtimestamp| type| source ---|---|--- 2026-03-24 16:25:35+00:00| seen| https://bsky.app/profile/tylerayoung.com/post/3mhsygvr4ds2l 2026-03-25 02:28:39+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626 2026-03-27 21:23:14+00:00| published-proof-of-concept|...

CVE-2026-33497

creationtimestamp| type| source ---|---|--- 2026-03-24 14:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhssrvxwwq2p 2026-03-24 23:15:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdyluzh2c 2026-03-25 03:00:08+00:00| seen|...

CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

CVE-2025-14915

creationtimestamp| type| source ---|---|--- 2026-03-24 14:15:07+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsr5mmujp2c 2026-03-24 16:35:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsyxw6sij2l...