24647 matches found
CVE-2026-34392
creationtimestamp| type| source ---|---|--- 2026-04-08 23:33:06+00:00| seen| Telegram/nb1jq11aD1wlJ1YglJrLy9zN5IvfOUCCPtd3YJ7-KFKCMzY 2026-04-09 08:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2douz4vn2s 2026-04-18 07:37:08+00:00| seen|...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a soft-fail of OCSP checks when soft-fail is disabled. Remediation Upgrade...
Improper Authentication
Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a...
Improper Authentication
Overview org.apache.tomcat:tomcat-coyote is a Tomcat Connectors and HTTP parser. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. An attacker can trigger a soft-fail of OCSP checks when...
Improper Authentication
Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. An attacker can trigger a soft-fail of OCSP checks whe...
CVE-2025-50669
creationtimestamp| type| source ---|---|--- 2026-04-08 19:30:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370742055082948...
Deserialization of Untrusted Data
Overview praisonai is a PraisonAI TypeScript AI Agents Framework - Node.js, npm, and Javascript AI Agents Framework Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the YAML deserialization in the loadAgentFromFile function. An attacker can execute...
CVE-2025-50668
creationtimestamp| type| source ---|---|--- 2026-04-08 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370636293391705...
CVE-2026-5858
creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 02:28:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372387571865499 2026-04-09 17:03:07+00:00| seen|...
CVE-2026-3396
creationtimestamp| type| source ---|---|--- 2026-04-08 13:16:11+00:00| seen| Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRiDRLUrQ 2026-04-08 14:30:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyiymuxss2i 2026-04-09 11:00:03+00:00| seen|...
CVE-2026-32280
creationtimestamp| type| source ---|---|--- 2026-04-08 04:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixhc6vmqn2q 2026-04-08 23:32:24+00:00| seen| Telegram/aEQe0P-AMU0sS3Jz8wPVEzQz8QZjOsktArIVrJmPyKpvP4 2026-04-08 23:32:47+00:00| seen|...
CVE-2026-3499
creationtimestamp| type| source ---|---|--- 2026-04-08 03:17:02+00:00| seen| Telegram/OIususpWixIDiQQq7x0EEBhUibUD-5oYLPzoeXaqET3sKo 2026-04-08 04:24:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixh4hu6j22s 2026-04-21 06:44:07+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-32144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Certificate Validation vulnerability in Erlang OTP publickey pubkeyocsp module allows OCSP designated-responder authorization bypass via missing...
CVE-2026-28387
creationtimestamp| type| source ---|---|--- 2026-04-07 23:31:26+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3miwwr7vxwk2o 2026-04-08 12:10:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6guojc23 2026-04-09 00:01:12+00:00| seen|...
GHSA-65W6-PF7X-5G85
creationtimestamp| type| source ---|---|--- 2026-04-07 23:21:06+00:00| seen| Telegram/WwaVaWmCpWfeYuJ8P8IqcUlHCUAeEgjmrCmKGvAa3A2q2J0...
CVE-2026-35185
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes sensitive information including authentication tokens usertoken, user activity, client IP addresses, and server configuration details. This allows a...
WordPress Charitable plugin <= 1.8.9.7 - Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook vulnerability
Insufficient Verification of Data Authenticity to Unauthenticated Donation Status Forgery via Stripe Webhook vulnerability discovered by Andrés Cruciani in WordPress Plugin Charitable versions = 1.8.9.7...
CVE-2026-25776
creationtimestamp| type| source ---|---|--- 2026-04-07 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN66473735/ 2026-04-08 10:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixzvm5wfr2x 2026-04-08 10:00:29+00:00| seen|...
CVE-2026-39891
creationtimestamp| type| source ---|---|--- 2026-04-07 20:48:24+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hwg5-x759-7wjg 2026-04-08 22:52:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizf2vvhym23 2026-04-09...