CVE-2026-34430

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 16:29:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4frky4p2r 2026-04-01 16:50:34+00:00| seen|...

CVE-2025-9497

creationtimestamp| type| source ---|---|--- 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM...

GHSA-VC8F-X9PP-WF5P

creationtimestamp| type| source ---|---|--- 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM...

CVE-2026-22767

creationtimestamp| type| source ---|---|--- 2026-04-01 15:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migypf3ceh2n 2026-04-01 15:25:59+00:00| seen| Telegram/4u6pNJfi3nLv5HBYbkAVRO5hA7CasKnKFj2guWNAP2iZfQ 2026-04-01 16:09:03+00:00| seen|...

CVE-2026-2948

creationtimestamp| type| source ---|---|--- 2026-04-01 15:03:43+00:00| seen| https://bsky.app/profile/eta.kyte.wtf/post/3migxlxa2ls2g 2026-05-05 06:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kbmoild2o...

CVE-2026-5255

creationtimestamp| type| source ---|---|--- 2026-04-01 08:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migcqymasv23...

CVE-2026-5256

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 08:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i 2026-04-04 05:00:15+00:00| seen|...

CVE-2026-32734

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32926

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 00:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihyoumk472s 2026-04-02 01:18:12+00:00| seen| Telegram/Bkkez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48...

CVE-2026-32927

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 00:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihy4xrmbl23 2026-04-02 01:18:28+00:00| seen| Telegram/7rLczVeBBv6SSIB10Z8cqxb4bee2TcHdurxt5OLTZQuJPU...

CVE-2025-13855

creationtimestamp| type| source ---|---|--- 2026-04-01 03:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifp7aucs22m 2026-04-01 03:17:49+00:00| published-proof-of-concept| Telegram/rQGGJNosiE90GfC4CPODN8OMH2HUk0rxa4zVhsu5hB7e0 2026-04-03 14:40:10+00:00| seen|...

CVE-2026-34548

creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...

CVE-2026-5237

creationtimestamp| type| source ---|---|--- 2026-04-01 01:15:30+00:00| published-proof-of-concept| Telegram/I7gM78d3mp9wugorspZkHmlDKuo-8DymFEq-4a44ip7mrow 2026-04-01 02:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifosvbro624...

Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Summary Ash.Type.Module.castinput/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has ...

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user input when creating or editing blog articles in the category section, which could lea...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a flaw in differential encoding validation, potentially leading to cyclic creation...

aiohttp 注入漏洞

Aiohttp is an open-source framework developed by aio-libs, used for asynchronous HTTP client/server interactions with asyncio and Python. Versions of AIOHTTP prior to 3.13.4 had a injection vulnerability. This vulnerability stemmed from the possibility that attackers could control the reason...

GHSA-FF66-236V-P4FG

creationtimestamp| type| source ---|---|--- 2026-03-31 23:20:56+00:00| seen| Telegram/8TNuFRjRJBw5r6zwiOXWdT-cqnzTtiBnsbsFB7NS1OTWS8...

CVE-2026-2351

creationtimestamp| type| source ---|---|--- 2026-03-31 22:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mifbjmitr62x...

GHSA-677C-XV24-CRGX baserCMS is Vulnerable to Cross-site Scripting

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...