📄 Splunk Enterprise 9.1.5 / 9.2.2 Vulnerability Scanner

This PHP script is a defensive vulnerability checker for CVE-2024-36985 affecting Splunk Enterprise. It authenticates to a Splunk instance using provided credentials, retrieves the installed Splunk version, and determines whether it falls within the vulnerable ranges. The script then enumerates...

Linux Ethernet Network Adapter Driver Buffer Overflow

The vulnerability of the enacomcompstatustoerrno function in the drivers/net/ethernet/amazon/ena/enacom.c file of the Ethernet network adapter driver for the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacke...

SUSE SLES15: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (SUSE-SU-2026:0784-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0784-1 advisory. This update for postgresql16 fixes the following issue: Update to version 16.13 bsc1258754. Regression fixes: - the substring function raise...

OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Summary In a narrow Signal reaction-notification path, reaction-only inbound events could enqueue a status event before sender access checks were applied. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.2.24 latest published at patch time - Fixed: 2026.2.25 Details In the...

CVE-2026-25146

creationtimestamp| type| source ---|---|--- 2026-03-03 22:19:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6sfkxgdu2t 2026-03-04 02:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg76y54phf2o 2026-03-04 23:40:10+00:00| seen|...

CVE-2025-70236

creationtimestamp| type| source ---|---|--- 2026-03-03 20:03:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116167028816189275 2026-03-04 17:03:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaraaqo3u2v...

CVE-2025-23299

creationtimestamp| type| source ---|---|--- 2026-03-03 19:21:18+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116166864253986208...

CVE-2025-15599

DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textarea rawtext element validation in the SAFEFORXML regex. Attackers can include closing rawtext tags like in attribute...

CVE-2025-48653

creationtimestamp| type| source ---|---|--- 2026-03-03 15:46:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg64i2md4l26...

SUSE-SU-2026:0787-1 Security update for postgresql17

This update for postgresql17 fixes the following issue: Update to version 17.9 bsc1258754. Regression fixes: - the substring function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database column caused by CVE-2026-2006 fix. - a...

SUSE-SU-2026:0784-1 Security update for postgresql16

This update for postgresql16 fixes the following issue: Update to version 16.13 bsc1258754. Regression fixes: - the substring function raises an error 'invalid byte sequence for encoding' on non-ASCII text values if the source of that value is a database column caused by CVE-2026-2006 fix. - a...

CVE-2026-22886

creationtimestamp| type| source ---|---|--- 2026-03-03 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116164777052678463 2026-03-03 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg5kspip6z2p 2026-03-03 10:31:29+00:00| seen|...

GHSA-FGVX-58P6-GJWC

creationtimestamp| type| source ---|---|--- 2026-03-03 09:40:09+00:00| seen| https://gist.github.com/alon710/f004b3a13a4436b9948f6c5897ca277d...

ECHO-7BC9-C663-1FEF

Bulletin has no description...

GHSA-V892-HWPG-JWQP

creationtimestamp| type| source ---|---|--- 2026-03-03 06:10:08+00:00| seen| https://gist.github.com/alon710/315443b2c64c5337a0ec35deba7b69bb...

GHSA-5847-RM3G-23MW

creationtimestamp| type| source ---|---|--- 2026-03-03 03:10:08+00:00| seen| https://gist.github.com/alon710/5140ab55ac1ef23f4d5f0c56b10ebb98...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005442)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005442 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, t...

GHSA-XW4P-PW82-HQR7

creationtimestamp| type| source ---|---|--- 2026-03-02 23:10:08+00:00| seen| https://gist.github.com/alon710/0b0f2721978b5a0277c2bf2492b30919...

CVE-2026-24051

creationtimestamp| type| source ---|---|--- 2026-03-02 22:44:05+00:00| seen| https://gist.github.com/cwayne18/56fc3450ace002a78168f18150d3200c 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-09 01:27:25+00:00| published-proof-of-concept|...

CVE-2026-0038

creationtimestamp| type| source ---|---|--- 2026-03-02 19:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3zscqoxr2o 2026-03-02 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4aw6zhzw26 2026-03-02 22:15:08+00:00| seen|...