CVE-2026-32982

creationtimestamp| type| source ---|---|--- 2026-03-31 12:28:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6iajyix2s 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 14:06:48+00:00| seen|...

CVE-2026-34509

creationtimestamp| type| source ---|---|--- 2026-03-31 12:27:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6fivqkw25 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 13:19:41+00:00| seen|...

CVE-2026-4317

creationtimestamp| type| source ---|---|--- 2026-03-31 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3midxuhnjb42i 2026-03-31 10:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midzgvh7s62o 2026-03-31 11:17:48+00:00| seen|...

SUSE CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2025-32957

creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyy2rkto2j 2026-03-31 01:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micz5zuvuo2h 2026-03-31 03:10:50+00:00| seen|...

AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

GHSA-Q6JJ-R49P-94FH AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

RHSA-2026:3402

creationtimestamp| type| source ---|---|--- 2026-03-30 14:35:01+00:00| seen| https://gist.github.com/fao89/0ef4daafb58f204bb3f4b9361f75d68c 2026-03-30 14:50:35+00:00| seen| https://gist.github.com/fao89/ce009677a07abdc70b85a5ec1d9a9b85...

CERTFR-2026-ACT-013

creationtimestamp| type| source ---|---|--- 2026-03-30 14:17:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mibu44vvge2o 2026-03-30 14:18:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116318553525388674 2026-03-31 05:40:09+00:00| seen|...

CVE-2026-4415

creationtimestamp| type| source ---|---|--- 2026-03-30 07:21:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html 2026-03-30 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7z567dw2t 2026-03-30 09:00:30+00:00| seen|...

CVE-2026-3124

creationtimestamp| type| source ---|---|--- 2026-03-30 02:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mialzmanvq2c 2026-03-30 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116315889917405260 2026-03-30 03:00:31+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-33748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient...

Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-4176

creationtimestamp| type| source ---|---|--- 2026-03-29 22:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mia6244dht22 2026-03-29 22:30:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/116314827160786387 2026-03-29 22:30:15+00:00| seen|...

CVE-2026-0562

creationtimestamp| type| source ---|---|--- 2026-03-29 18:38:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7s7tv2dm2m 2026-03-29 18:40:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7scblyqk24 2026-03-29 19:15:55+00:00| published-proof-of-concept|...

CVE-2026-0560

creationtimestamp| type| source ---|---|--- 2026-03-29 18:35:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi7ryzibeh2n 2026-03-29 18:38:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7s7mjdba2x 2026-03-29 19:15:55+00:00|...

CVE-2026-5035

creationtimestamp| type| source ---|---|--- 2026-03-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116311289174971513 2026-03-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi6mupgw222y 2026-03-29 09:15:18+00:00| seen|...

CVE-2026-5018

creationtimestamp| type| source ---|---|--- 2026-03-29 00:34:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5vn3bhid2s 2026-03-29 01:15:46+00:00| published-proof-of-concept| Telegram/2ZCZ0X-UsuKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY 2026-03-29 01:53:25+00:00| seen|...

CVE-2026-5019

creationtimestamp| type| source ---|---|--- 2026-03-29 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi5tqe2i6u2s 2026-03-29 00:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5tyngws42s 2026-03-29 01:15:46+00:00| published-proof-of-concept|...

CVE-2026-5016

creationtimestamp| type| source ---|---|--- 2026-03-28 23:15:16+00:00| published-proof-of-concept| Telegram/OEmB6HaBO0fT2xWNNxRYZpXvzEjDJ8zEr2b6XyKSAW6N8RA 2026-03-29 00:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5uacyx2q2i 2026-03-29 01:51:50+00:00| seen|...