CVE-2026-25147

creationtimestamp| type| source ---|---|--- 2026-02-27 17:14:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfu7ik7zfb2k 2026-03-04 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg6z66ywo723...

CVE-2025-15509

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2025-15509

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage...

GHSA-3645-FXCV-HQR4

creationtimestamp| type| source ---|---|--- 2026-02-27 04:00:18+00:00| seen| https://gist.github.com/alon710/bbb2b9f63be691f9cd5588ec4822d51e...

Vim 安全漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0073 contained security vulnerabilities. These vulnerabilities stemmed from the netrw plugin, which had a vulnerability related to operating system command injection. This could allow...

GHSA-C6RR-7PMC-73WC

creationtimestamp| type| source ---|---|--- 2026-02-25 18:40:19+00:00| seen| https://gist.github.com/alon710/4c89872b5367b732a7e8b5c781c3c38c...

MAL-2026-1229 Malicious code in @schedaero/net-common (npm)

Malicious package due to suspicious preinstall script, data exfiltration via User-Agent, process termination, and a suspicious URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5e87e24ed2574837f59c3fb4cf21d0c9677b4d5e729f0835fc90a9bf427c4c The package...

GHSA-VXG3-V4P6-F3FP

creationtimestamp| type| source ---|---|--- 2026-02-25 05:40:18+00:00| seen| https://gist.github.com/alon710/448101c1bc20902d2d5feed8cf461cdf...

PYSEC-2026-2126

changedetection.io is a free open source web page change detection tool. In versions prior to 0.54.1, changedetection.io is vulnerable to Server-Side Request Forgery SSRF because the URL validation function issafevalidurl does not validate the resolved IP address of watch URLs against private,...

CVE-2026-27195

creationtimestamp| type| source ---|---|--- 2026-02-25 01:40:27+00:00| seen| https://gist.github.com/alon710/447723fe5251aee242f8395c82fa3afa 2026-02-25 18:16:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpc2xrnsz2d...

USN-8062-1 curl vulnerabilities

It was discovered that curl incorrectly handled cookies when redirected from secure to insecure connections. An attacker could possibly use this issue to cause a denial of service, or obtain sensitive information. This issue only affected Ubuntu 25.10. CVE-2025-9086 Calvin Ruocco discovered that...

CVE-2026-2798

creationtimestamp| type| source ---|---|--- 2026-02-24 20:10:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmxxfxrle2f...

CVE-2024-1524

creationtimestamp| type| source ---|---|--- 2026-02-24 13:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfmbht7ukx2u 2026-03-03 02:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg4ocb2nbu2w...

CVE-2026-26331

yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously...

ROS-20260224-73-0019

Vulnerability in moodle related to url redirection to untrusted site. Exploitation of the vulnerability could allow an attacker acting remotely to redirect a user to an arbitrary url address...

RHEL 10 : golang (RHSA-2026:3192)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3192 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang: archive/zip: Excessive CPU consumption when...

GHSA-G3GW-Q23R-PGQM yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

Summary When yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impact yt-dlp maintainers assume the impact of this vulnerability to be high for anyone who us...

CVE-2026-25545

creationtimestamp| type| source ---|---|--- 2026-02-23 13:07:51+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-qq67-mvv5-fw3g 2026-02-24 01:36:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfkzq2dznx2x 2026-02-24 02:24:32+00:00|...

CVE-2026-2962

A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may b...

PT-2026-21515

An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the...