24674 matches found
EUVD-2026-9395
The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the seraphaccelapi AJAX action with fn=GetData. This is due to the OnAdminApiGetData function not performing any capability checks. This makes it...
MINI-WM46-XW29-WMRH
Bulletin has no description...
MINI-C35J-9R2J-VVVM
Bulletin has no description...
CVE-2026-3242
creationtimestamp| type| source ---|---|--- 2026-03-04 04:26:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7gwepksc2u...
MINI-2PGH-8XJF-7X4M
Bulletin has no description...
📄 Splunk Enterprise 9.1.5 / 9.2.2 Vulnerability Scanner
This PHP script is a defensive vulnerability checker for CVE-2024-36985 affecting Splunk Enterprise. It authenticates to a Splunk instance using provided credentials, retrieves the installed Splunk version, and determines whether it falls within the vulnerable ranges. The script then enumerates...
SUSE SLES15: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (SUSE-SU-2026:0784-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0784-1 advisory. This update for postgresql16 fixes the following issue: Update to version 16.13 bsc1258754. Regression fixes: - the substring function raise...
OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks
Summary In a narrow Signal reaction-notification path, reaction-only inbound events could enqueue a status event before sender access checks were applied. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.2.24 latest published at patch time - Fixed: 2026.2.25 Details In the...
CVE-2026-25146
creationtimestamp| type| source ---|---|--- 2026-03-03 22:19:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6sfkxgdu2t 2026-03-04 02:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg76y54phf2o 2026-03-04 23:40:10+00:00| seen|...
CVE-2025-70236
creationtimestamp| type| source ---|---|--- 2026-03-03 20:03:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116167028816189275 2026-03-04 17:03:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaraaqo3u2v...
CVE-2025-23299
creationtimestamp| type| source ---|---|--- 2026-03-03 19:21:18+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116166864253986208...
CVE-2025-15599
DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFEFORXML regex. Attackers can include closing rawtext tags like in attribute...
CVE-2025-48653
creationtimestamp| type| source ---|---|--- 2026-03-03 15:46:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg64i2md4l26...
SUSE-SU-2026:0787-1 Security update for postgresql17
This update for postgresql17 fixes the following issue: Update to version 17.9 bsc1258754. Regression fixes: - the substring function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database column caused by CVE-2026-2006 fix. - a...
SUSE-SU-2026:0784-1 Security update for postgresql16
This update for postgresql16 fixes the following issue: Update to version 16.13 bsc1258754. Regression fixes: - the substring function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database column caused by CVE-2026-2006 fix. - a...
CVE-2026-22886
creationtimestamp| type| source ---|---|--- 2026-03-03 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116164777052678463 2026-03-03 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg5kspip6z2p 2026-03-03 10:31:29+00:00| seen|...
GHSA-FGVX-58P6-GJWC
creationtimestamp| type| source ---|---|--- 2026-03-03 09:40:09+00:00| seen| https://gist.github.com/alon710/f004b3a13a4436b9948f6c5897ca277d...
ECHO-7BC9-C663-1FEF
Bulletin has no description...