27221 matches found
CVE-2026-41241
creationtimestamp| type| source ---|---|--- 2026-04-23 19:32:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6qvmqrys2q 2026-04-23 21:26:07+00:00| published-proof-of-concept| Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9UsDC-frBku-7BiY 2026-05-27 12:05:20+00:00| seen|...
CVE-2026-6919
creationtimestamp| type| source ---|---|--- 2026-04-23 18:25:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116455423009127074 2026-04-24 15:22:14+00:00| seen| Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE 2026-04-25 23:00:08+00:00| seen|...
CVE-2026-31533
creationtimestamp| type| source ---|---|--- 2026-04-23 18:12:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116455370337412135 2026-04-24 07:27:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116458496402084891 2026-05-05 20:00:00+00:00| seen|...
CVE-2026-40891
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol OTLP, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malformed trailer could...
CVE-2026-40891 OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol OTLP, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malformed trailer could...
CVE-2026-40891
OpenTelemetry dotnet (OpenTelemetry .NET telemetry framework) contains a vulnerability in versions 1.13.1 through before 1.15.2. During OTLP/gRPC export, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. A malformed trailer could encode a very large l...
CVE-2026-40891 OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol OTLP, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malformed trailer could...
CVE-2026-40891 OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol OTLP, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malformed trailer could...
Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed
Summary Requesting a static JS/CSS resource from the astro path with an incorrect or malformed if-match header returns a 500 error with a one-year cache lifetime instead of 412 in some cases. As a result, all subsequent requests to that file — regardless of the if-match header — will be served a...
CVE-2026-31532
creationtimestamp| type| source ---|---|--- 2026-04-23 13:55:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116454361395635388 2026-04-23 20:03:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116455806440539618 2026-05-07 14:35:12+00:00| seen|...
Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure
The Ajax Load More – Infinite Scroll plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.6.0.2. The plugin's AJAX endpoint wpajaxnoprivalmgetposts allows unauthenticated users to access non-public posts draft, private, pending, future, tras...
WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status Disclosure
Efí Bank Gerencianet Oficial = 3.1.3 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data, exploit requires crafted requests. id: CVE-2025-59136 info: name: WordPress...
CVE-2026-42183
creationtimestamp| type| source ---|---|--- 2026-04-23 08:17:54+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p4gq-3vxj-f4jq 2026-05-09 05:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfijpclhw2i...
SUSE CVE-2026-22003
unknown...
openSUSE 16 Security Update : tomcat11 (openSUSE-SU-2026:20595-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20595-1 advisory. - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...
PT-2026-34681
Summary Requesting a static JS/CSS resource from the astro path with an incorrect or malformed if-match header returns a 500 error with a one-year cache lifetime instead of 412 in some cases. As a result, all subsequent requests to that file — regardless of the if-match header — will be served a...
PT-2026-34781
OpenClaw before 2026.3.31 contains a session visibility bypass vulnerability where the session status function fails to enforce configured tools.sessions.visibility restrictions for unsandboxed invocations. Attackers can invoke session status without sandbox constraints to bypass session-policy...
CVE-2026-40891: Memory Allocation with Excessive Size Value
OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol OTLP, the exporter may parse a server-provided grpc-status-details-bin trailer during retry handling. Prior to the fix, a malformed trailer could...
PT-2026-34817
Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.0 Kirby versions prior to 5.4.0 Description An authorization bypass allows authenticated users to perform actions beyond their configured permissions, leading to privilege escalation. In the REST API, the isDraft fl...