Schneider Electric PowerChute Serial Shutdown 资源管理错误漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown and energy management software from Schneider Electric France. Schneider Electric PowerChute Serial Shutdown suffers from a Resource Management Error vulnerability that stems from uncontrolled resource consumption,...

PT-2026-32677

Name of the Vulnerable Software and Affected Versions PowerChute Serial Shutdown affected versions not specified Description An uncontrolled resource consumption issue exists where a Web Admin user can cause a denial of service. This occurs when the system is flooded with specially crafted POST...

CVE-2026-32272

creationtimestamp| type| source ---|---|--- 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4 2026-04-14 02:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgcdnm6ug2o...

GHSA-X9H5-R9V2-VCWW

creationtimestamp| type| source ---|---|--- 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4...

CVE-2026-39671

creationtimestamp| type| source ---|---|--- 2026-04-13 23:20:55+00:00| seen| Telegram/1z3cy8b4nyTXxlXgo7X-5B9mikKWob2N9UfH7kQzWNiwJw...

CVE-2026-33908

creationtimestamp| type| source ---|---|--- 2026-04-13 22:33:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfwcmpmsw2h 2026-04-13 23:21:32+00:00| published-proof-of-concept| Telegram/DNd18EV1mvoOjDBqQat4zOgBzw-F-OvAJ7pAjcWk8VU 2026-04-14 01:08:14+00:00| seen|...

CVE-2026-22564

creationtimestamp| type| source ---|---|--- 2026-04-13 22:32:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfwamtom625 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4 2026-04-14 00:58:16+00:00| seen|...

EUVD-2026-22047

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing endpoints. Attackers can craft malicious requests targeting login, registration, file upload,...

CVE-2025-66769

creationtimestamp| type| source ---|---|--- 2026-04-13 21:27:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfsmitrwj2w...

GHSA-G99C-H7J7-RFHV

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:51+00:00| published-proof-of-concept| Telegram/E9uORDS5VkHsQsN2ALVesQEvtj4s64kK7xuccSs6pLn-94...

CVE-2026-39496

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:20+00:00| seen| Telegram/xEAlzuvdoDbl3-4UvjRUOPM0QQ9w8kB8O-gQzs6j3EZAGw...

CVE-2026-39677

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:20+00:00| seen| Telegram/xEAlzuvdoDbl3-4UvjRUOPM0QQ9w8kB8O-gQzs6j3EZAGw...

CVE-2026-32283

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-04-17 12:01:42+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjouv2a7c72j 2026-05-06 14:30:23+00:00| seen|...

CVE-2026-27143

creationtimestamp| type| source ---|---|--- 2026-04-13 21:22:02+00:00| seen| Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ 2026-05-07 18:20:11+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteahwco2i 2026-05-07 18:20:15+00:00| seen|...

CVE-2026-33740

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Email/importEml endpoint contains an Insecure Direct Object Reference IDOR vulnerability where the attacker-supplied fileId parameter is used to fetch any attachment directly from...

CVE-2026-40041

creationtimestamp| type| source ---|---|--- 2026-04-13 20:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpw2qay42o...

CVE-2026-6202

creationtimestamp| type| source ---|---|--- 2026-04-13 20:11:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfofgbqjr2w...

CVE-2026-6201

creationtimestamp| type| source ---|---|--- 2026-04-13 20:08:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfo7vg7zr2w...

CVE-2026-41130

creationtimestamp| type| source ---|---|--- 2026-04-13 19:51:06+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-95wr-3f2v-v2wh 2026-04-22 02:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2hgcolro2p...

CVE-2026-33551

A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...