CVE-2026-30282

creationtimestamp| type| source ---|---|--- 2026-03-31 18:34:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesvzalqn2t 2026-03-31 18:58:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieubjuhm622 2026-04-07 23:00:14+00:00| seen|...

CVE-2026-32725

creationtimestamp| type| source ---|---|--- 2026-03-31 18:31:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miesptmlej2s 2026-03-31 18:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieu45uy4c2g 2026-03-31 19:20:34+00:00| published-proof-of-concept|...

CVE-2026-21631

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 12:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migoed6tnw2q 2026-04-01 12:20:17+00:00| seen|...

CVE-2026-23898

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0384/ 2026-04-01 10:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116328983974110242 2026-04-01 10:30:32+00:00| seen|...

CVE-2026-5286

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116327922216539438 2026-04-01 06:00:29+00:00| seen|...

CVE-2026-34503

creationtimestamp| type| source ---|---|--- 2026-03-31 14:52:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miegiu7wq72i 2026-03-31 15:32:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mieiq3tu6t2c 2026-03-31 15:33:11+00:00| seen|...

CVE-2026-32920

creationtimestamp| type| source ---|---|--- 2026-03-31 12:51:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie7pzf3zw2h 2026-03-31 13:19:01+00:00| seen| Telegram/jSTFa01DEWFRhQKHtf4fP3tqxxyDE1Jfuh4yALHVDvczs38 2026-03-31 13:51:47+00:00| seen|...

CVE-2026-32982

creationtimestamp| type| source ---|---|--- 2026-03-31 12:28:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6iajyix2s 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 14:06:48+00:00| seen|...

CVE-2026-34509

creationtimestamp| type| source ---|---|--- 2026-03-31 12:27:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6fivqkw25 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 13:19:41+00:00| seen|...

CVE-2026-4317

creationtimestamp| type| source ---|---|--- 2026-03-31 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3midxuhnjb42i 2026-03-31 10:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midzgvh7s62o 2026-03-31 11:17:48+00:00| seen|...

SUSE CVE-2026-27877

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2025-32957

creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyy2rkto2j 2026-03-31 01:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micz5zuvuo2h 2026-03-31 03:10:50+00:00| seen|...

GHSA-Q6JJ-R49P-94FH AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

AVideo has Video Password Protection Bypass via API Endpoints Returning Full Playback Sources Without Password Verification

Summary The getapivideofile and getapivideo API endpoints in AVideo return full video playback sources direct MP4 URLs, HLS manifests for password-protected videos without verifying the video password. While the normal web playback flow enforces password checks via the CustomizeUser::getModeYouTu...

RHSA-2026:3402

creationtimestamp| type| source ---|---|--- 2026-03-30 14:35:01+00:00| seen| https://gist.github.com/fao89/0ef4daafb58f204bb3f4b9361f75d68c 2026-03-30 14:50:35+00:00| seen| https://gist.github.com/fao89/ce009677a07abdc70b85a5ec1d9a9b85...

CERTFR-2026-ACT-013

creationtimestamp| type| source ---|---|--- 2026-03-30 14:17:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mibu44vvge2o 2026-03-30 14:18:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116318553525388674 2026-03-31 05:40:09+00:00| seen|...

CVE-2026-4415

creationtimestamp| type| source ---|---|--- 2026-03-30 07:21:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html 2026-03-30 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7z567dw2t 2026-03-30 09:00:30+00:00| seen|...

CVE-2026-3124

creationtimestamp| type| source ---|---|--- 2026-03-30 02:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mialzmanvq2c 2026-03-30 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116315889917405260 2026-03-30 03:00:31+00:00| seen|...

Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources’ passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

Linux Distros Unpatched Vulnerability : CVE-2026-33748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient...