18970 matches found
GHSA-8337-3P73-46F4
creationtimestamp| type| source ---|---|--- 2026-04-04 01:19:10+00:00| published-proof-of-concept| Telegram/7aT9UpYbZ02LD1lZLti1mg9cdxIpZxAoIiq3Sp7jGujjzO4...
GHSA-9GM9-C8MQ-VQ7M
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
GHSA-W37C-QQFP-C67F
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
CVE-2026-34400
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
EUVD-2026-18803
A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /adminpanel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestrict...
GHSA-FCM4-4PJ2-M5HF
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...
GHSA-J8RJ-FMPV-WCXW
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...
GHSA-V9P7-GF3Q-H779
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:02+00:00| published-proof-of-concept| Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the resource handler. An attacker can gain unauthorized access and modify application resources across the entire controller by leveraging authenticated access as a user, machine, or controller. Remediation A...
EUVD-2026-18577
A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android. This vulnerability affects unknown code of the file campusconnect/BuildConfig.java of the component campusconnect.ucc. This manipulation causes use of hard-coded cryptographic key . The attack can only be executed locally. Th...
GHSA-H22J-FRRF-5VXQ
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...
CVE-2025-43257
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:27+00:00| published-proof-of-concept| Telegram/LEqzgESE2wGHUVmUGbeDXDuSp8F8SqNkH2O3nuA9SKVO2A...
CVE-2025-30433
creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:38+00:00| published-proof-of-concept| Telegram/MjTxKferycnY5Pne62qxIs8GZVQD5pDYWQHmJtbu7pIL3GM...
Information Exposure
Overview @openclaw/nostr is an OpenClaw Nostr channel plugin for NIP-04 encrypted DMs Affected versions of this package are vulnerable to Information Exposure in the config.get process. An attacker can obtain sensitive plaintext signing keys by accessing configuration views that expose the secret...
Unprotected Alternate Channel
Overview Affected versions of this package are vulnerable to Unprotected Alternate Channel due to the omission of confirmation in proxy-mode multiplexing sessions. An attacker can cause unintended data handling by establishing a multiplexed session without explicit confirmation when specific and...
CVE-2026-5354
A flaw has been found in Trendnet TEW-657BRM 1.00.1. Affected by this vulnerability is the function vpnconnect of the file /setup.cgi. Executing a manipulation of the argument policyname can lead to os command injection. The attack can be executed remotely. The exploit has been published and may ...
CVE-2026-5256
A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...
EUVD-2026-18122
A flaw has been found in vanna-ai vanna up to 2.0.2. Affected by this issue is some unknown functionality of the component FastAPI/Flask Server. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. The exploit has been...