24651 matches found
CVE-2026-5256
creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 08:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i 2026-04-04 05:00:15+00:00| seen|...
CVE-2026-32883
A flaw was found in Botan. A remote attacker could exploit a vulnerability in the X509 path validation process where the signature of Online Certificate Status Protocol OCSP responses was not verified. This omission allows an attacker to provide forged OCSP responses, potentially leading to the...
CVE-2026-34551
creationtimestamp| type| source ---|---|--- 2026-04-01 02:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miflwvexr32g...
CVE-2026-5249 gougucms Record Endpoint record.html cross site scripting
A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\view\user\record.html of the component Record Endpoint. Performing a manipulation of the argument value.content results in cross site scripting. It is possible to initiate the...
Linux Distros Unpatched Vulnerability : CVE-2026-32883
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate...
CVE-2026-34738
WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and dra...
CVE-2026-34738 AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter
WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and dra...
CVE-2026-34738
WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and dra...
CVE-2026-29180
creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA...
GHSA-QXGF-HMCJ-3XW3
creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA...
EUVD-2026-17557
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, users who lost access to a topic e.g., removed from a private category group could still interact with polls in that topic...
CVE-2026-5272
creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 06:19:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116327997434667227 2026-04-01 15:25:32+00:00| seen|...
CVE-2026-29870
creationtimestamp| type| source ---|---|--- 2026-03-31 16:30:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mielytc4zb2s...
MINI-F9XW-CGMP-MF63
Bulletin has no description...
GHSA-G7CR-9H7Q-4QXQ
creationtimestamp| type| source ---|---|--- 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo 2026-03-31 13:19:41+00:00| seen| Telegram/GoYhMbIBJrUQVgFRnoM40D1rFway6I5o3ckcxiQjEVHvvo4...
CVE-2025-54597
creationtimestamp| type| source ---|---|--- 2026-03-31 00:56:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54597.yaml 2026-04-01 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mihlnmpohj2l...
PT-2026-29365
Name of the Vulnerable Software and Affected Versions AVideo versions prior to 26.0 Description AVideo is an open source video platform. Versions 26.0 and earlier allow any uploader to set a video’s status to any valid state, including "active", through the overrideStatus request parameter. This...
Discourse 授权问题漏洞
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse is vulnerable to an authorization issue. The vulnerability stems from the fact that a user who loses access to a topic can stil...