RHEL 8 : grafana-pcp (RHSA-2026:3821)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3821 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

CVE-2026-30823

creationtimestamp| type| source ---|---|--- 2026-03-05 21:31:35+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cwc3-p92j-g7qm 2026-03-07 08:07:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghep67nmd2k 2026-03-07...

CVE-2026-21628

creationtimestamp| type| source ---|---|--- 2026-03-05 10:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgclf5gzfu2o 2026-03-05 10:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116176101773626475 2026-03-05 10:30:34+00:00| seen|...

CVE-2026-1757

creationtimestamp| type| source ---|---|--- 2026-03-05 08:02:32+00:00| seen| https://bsky.app/profile/slackers.it/post/3mgcdhwzheo22 2026-03-05 08:02:36+00:00| seen| https://bsky.app/profile/slackers.it/post/3mgcdi2g2lr2y 2026-03-07 12:00:55+00:00| seen|...

CVE-2026-28536

creationtimestamp| type| source ---|---|--- 2026-03-05 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116175393685481196 2026-03-05 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mgcboltqp32m 2026-03-05 08:01:30+00:00| seen|...

Directory Traversal

Overview dbt-common is a The shared common utilities that dbt-core and adapter implementations use Affected versions of this package are vulnerable to Directory Traversal in the safeextract process. An attacker can write files to unintended sibling directories by crafting a malicious tarball that...

dbt-common's commonprefix() doesn't protect against path traversal

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

GHSA-W75W-9QV4-J5XJ dbt-common's commonprefix() doesn't protect against path traversal

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

WordPress plugin Royal Elementor Addons 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-23610

Name of the Vulnerable Software and Affected Versions dbt-common versions prior to 1.34.2 dbt-common versions prior to 1.37.3 Description A path traversal issue exists in the safe extract function of dbt-common when extracting tarball archives. The function uses os.path.commonprefix to validate...

CVE-2026-2835

creationtimestamp| type| source ---|---|--- 2026-03-04 23:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbibcch662u 2026-03-05 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116173625220062897 2026-03-05 00:00:48+00:00| seen|...

CVE-2026-27887

Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size e.g. tables with many rows or large content bodies, Spin may in so...

CVE-2026-29074

creationtimestamp| type| source ---|---|--- 2026-03-04 14:54:15+00:00| published-proof-of-concept| https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673 2026-03-06 08:23:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgev4vowdk26 2026-03-06 08:34:09+00:00|...

CVE-2026-27446

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

Exploit for SQL Injection in Dbgpt Db-Gpt

DBGPT Unauthenticated Information Disclosure & SQL Execution P...

CVE-2026-3224

creationtimestamp| type| source ---|---|--- 2026-03-04 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116167962878815008 2026-03-04 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg6y3hgi2i2u 2026-03-04 00:03:54+00:00| seen|...

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities. These vulnerabilities stemmed from incorrect interpretation of email addresses in email header...

CVE-2026-27750

creationtimestamp| type| source ---|---|--- 2026-03-03 15:37:09+00:00| seen| https://infosec.exchange/users/quarkslab/statuses/116165982849269143 2026-03-03 15:37:37+00:00| seen| https://bsky.app/profile/quarkslab.bsky.social/post/3mg63xocxwc2l 2026-03-05 17:59:26+00:00| seen|...

CVE-2026-20777

creationtimestamp| type| source ---|---|--- 2026-03-03 15:30:06+00:00| seen| https://infosec.place/objects/920ca239-3e6d-45b4-bc4a-e5c1b5040806 2026-03-03 15:37:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg63xlwitz26 2026-03-03 16:24:45+00:00| seen|...

CVE-2026-22891

creationtimestamp| type| source ---|---|--- 2026-03-03 15:00:13+00:00| seen| https://infosec.place/objects/803e77b0-7328-44f5-a9a0-6ad0500f3be7 2026-03-03 15:37:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg63xtkbeq2d 2026-03-03 16:03:21+00:00| seen|...