CVE-2026-2049

creationtimestamp| type| source ---|---|--- 2026-02-21 16:11:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfez7paodc26 2026-04-20 20:55:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjxe4z4yvc2h 2026-04-20 21:00:46+00:00| seen|...

CVE-2026-27579 CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

CVE-2026-27579

CollabPlatform is affected by a CORS misconfiguration in the Appwrite component that allows arbitrary origins to make credentialed requests. This enables an attacker-controlled domain to issue authenticated cross-origin requests and read sensitive user data (emails, account identifiers, MFA statu...

GHSA-Q5FH-2HC8-F6RQ

creationtimestamp| type| source ---|---|--- 2026-02-21 09:40:40+00:00| seen| https://gist.github.com/alon710/d7954c7332e01cf40fa1ed726cd8c207...

CVE-2026-27470

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

CVE-2026-27452

creationtimestamp| type| source ---|---|--- 2026-02-21 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116107446506707835 2026-02-21 07:30:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfe43sfnnj2p...

CVE-2026-2929

creationtimestamp| type| source ---|---|--- 2026-02-21 05:17:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116106923547563735 2026-02-22 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116112754479386463 2026-02-22 06:00:32+00:00| seen|...

PT-2026-21370

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

Linux Distros Unpatched Vulnerability : CVE-2026-27470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a...

CVE-2026-27113

Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...

UBUNTU-CVE-2026-27113

Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and prior to commit a4f6b8d8c90b3eaa33d13dfd1093062ab9c4b30c on the master branch, arbitrary command injection can lead to code execution when a user enters a directory in a Git...

GHSA-GV8R-9RW9-9697

creationtimestamp| type| source ---|---|--- 2026-02-20 21:40:40+00:00| seen| https://gist.github.com/alon710/4cd1875c786b514610f28029ba8d8c98...

CVE-2026-2853

creationtimestamp| type| source ---|---|--- 2026-02-20 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcyvdcvl72c 2026-02-24 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflf3o47j42m...

CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...

CVE-2026-24891

creationtimestamp| type| source ---|---|--- 2026-02-20 18:32:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcqltw7ab2h 2026-02-24 20:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmzmeuhn223...

CVE-2026-2885

creationtimestamp| type| source ---|---|--- 2026-02-20 17:35:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116104163122684263 2026-02-21 21:19:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffkf3kxom2k 2026-02-21 21:19:33+00:00| seen|...

BIT-TOMCAT-2026-24734 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native and Tomcat's FFM port of the Tomcat Native code did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypasse...

CVE-2017-4565

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4155

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2026-26050

creationtimestamp| type| source ---|---|--- 2026-02-20 03:00:30+00:00| seen| https://jvn.jp/en/jp/JVN69531868/ 2026-02-20 09:19:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfbrq5p4nf2t 2026-02-20 10:30:36+00:00| seen|...