CVE-2026-3055

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

CVE-2020-14304

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2026-31885

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in MS-ADPCM and IMA-ADPCM decoders due to unchecked predictor and stepindex values from input data. This vulnerability is fixed in 3.24.0...

CVE-2026-32142 shopware/commercial: `/api/_info/config` route exposes information about licenses

Shopware is an open commerce platform. /api/info/config route exposes information about licenses. This vulnerability is fixed in 7.8.1 and 6.10.15...

CVE-2026-27591

creationtimestamp| type| source ---|---|--- 2026-03-12 01:30:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213614461031957 2026-03-12 12:48:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgugq5rnq32h 2026-03-12 23:01:22+00:00| seen|...

Hyperterse 安全漏洞

Hyperterse is an open-source declarative framework developed by Hyperterse for building high-performance MCP servers. Versions of Hyperterse prior to v2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the search tool returning the original SQL queries, which could expos...

How Hive Pro Brings Comprehensive Security to  CrowdStrike and SentinelOne

& How HivePro Vulnerability Exposure Management VEM extends and amplifies the value of your existing endpoint security/EDR investments - turning detection strength into enterprise-wide vulnerability and exposure intelligence. The Challenge Your EDR is world-class. Your exposure visibility isn't...

CVE-2026-30945

creationtimestamp| type| source ---|---|--- 2026-03-10 11:12:42+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8rgj-vrfr-6hqr 2026-03-17 18:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhbkhqh6w32u...

ALSA-2026:4235 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections CVE-2026-1642 For more details about the security issues,...

CVE-2002-0059

creationtimestamp| type| source ---|---|--- 2026-03-09 17:15:08+00:00| seen| https://gist.github.com/verdurin/ec4ecbbbe37c7ae1f4a79c34dbdb6793...

Security Bulletin: Multiple vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

CVE-2025-70047

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ocaml (SUSE-SU-2026:0830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0830-1 advisory. - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

CVE-2025-69340

creationtimestamp| type| source ---|---|--- 2026-03-05 17:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdbl5e3l72c...

CVE-2026-3034

creationtimestamp| type| source ---|---|--- 2026-03-05 06:33:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgc6jhqi6y2e...

CVE-2025-50187

creationtimestamp| type| source ---|---|--- 2026-03-02 16:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3mrteptp2k 2026-03-02 18:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3udbmqow2u 2026-03-03 20:00:16+00:00| seen|...

CVE-2026-3166

creationtimestamp| type| source ---|---|--- 2026-02-25 08:39:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfobt26m7u2l 2026-02-25 09:16:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfodtygypj2y 2026-02-25 19:20:09+00:00| seen|...

CVE-2020-8165

creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:02+00:00| seen| https://gist.github.com/tu-trinh-scale/43724f4565a68c378a712b69b412cbe1 2026-04-14 10:27:03+00:00| seen| https://gist.github.com/zhaog100/f7442a42e06d52a6f0350990fe3b28f1...

CVE-2026-23607 GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spam Whitelist management interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv1$txtDescription parameter to...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...