23307 matches found
CVE-2026-3920
creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 21:50:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgveyeox232k 2026-03-16 00:00:00+00:00|...
CVE-2026-31873
creationtimestamp| type| source ---|---|--- 2026-03-12 00:10:42+00:00| published-proof-of-concept| https://github.com/unjs/unhead/security/advisories/GHSA-5339-hvwr-7582 2026-03-12 19:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv5ub6kvb2n...
CVE-2026-32232
creationtimestamp| type| source ---|---|--- 2026-03-11 17:24:36+00:00| published-proof-of-concept| https://github.com/qhkm/zeptoclaw/security/advisories/GHSA-2m67-cxxq-c3h8 2026-03-12 21:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgve5dqzr72u...
EUVD-2025-208562
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
CVE-2026-3848
creationtimestamp| type| source ---|---|--- 2026-03-11 15:16:47+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3848 2026-03-12 14:15:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgull4qogo2n 2026-03-12 16:00:00+00:00| seen|...
CVE-2025-67298
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
ClassroomIO.com 安全漏洞
ClassroomIO.com is an educational platform developed by ClassroomIO as open source. Versions of ClassroomIO.com prior to 0.2.6 contained security vulnerabilities. These vulnerabilities stemmed from defects in the/api/verify and/rest/v1/profile endpoints, which could allow remote attackers to gain...
CVE-2025-67298
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
CVE-2025-67298
CVE-2025-67298 affects ClasroomIO prior to v0.2.6. A remote attacker can escalate privileges through the endpoints /api/verify and /rest/v1/profile. The issue is classified as high severity (CVSS 3.1: 8.1, NETWORK, HIGH impact on confidentiality, integrity, and availability) with no user interact...
PT-2026-24682
🟠 CVE-2025-67298 - High An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile https://t.co/8wYmHccMqd https://t.co/YPBYyDSyrj...
CVE-2025-67298
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
CVE-2025-67298
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
CVE-2025-67298
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile...
EUVD-2026-10392
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder...
GHSA-QMW5-2P58-XVRC ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
An extremely large image profile could result in a heap overflow when encoding a PNG image...
Out-of-bounds Write
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Feathers has an OAuth Callback Account Takeover issue
An unauthenticated attacker can send a crafted GET request directly to /oauth/:provider/callback with a forged profile in the query string. The OAuth service's authentication payload has a fallback chain that reaches params.query the raw request query when Grant's session/state responses are empt...
GHSA-WG9X-QFGW-PXHJ Feathers has an OAuth Callback Account Takeover issue
An unauthenticated attacker can send a crafted GET request directly to /oauth/:provider/callback with a forged profile in the query string. The OAuth service's authentication payload has a fallback chain that reaches params.query the raw request query when Grant's session/state responses are empt...
Improper Authentication
Overview @feathersjs/authentication-oauth is an oAuth 1 and 2 authentication for Feathers. Powered by Grant. Affected versions of this package are vulnerable to Improper Authentication via the callback component. An attacker can gain unauthorized access to existing user accounts by sending a...