aiohttp 注入漏洞

Aiohttp is an open-source framework developed by aio-libs, used for asynchronous HTTP client/server interactions with asyncio and Python. Versions of AIOHTTP prior to 3.13.4 had a injection vulnerability. This vulnerability stemmed from the possibility that attackers could control the reason...

GHSA-FF66-236V-P4FG

creationtimestamp| type| source ---|---|--- 2026-03-31 23:20:56+00:00| seen| Telegram/8TNuFRjRJBw5r6zwiOXWdT-cqnzTtiBnsbsFB7NS1OTWS8...

CVE-2026-2351

creationtimestamp| type| source ---|---|--- 2026-03-31 22:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mifbjmitr62x...

GHSA-677C-XV24-CRGX baserCMS is Vulnerable to Cross-site Scripting

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

baserCMS is Vulnerable to Cross-site Scripting

baserCMS has DOM-based cross-site scripting in tag creation. Target baserCMS 5.2.2 and earlier versions Vulnerability Malicious JavaScript may be executed when creating a tag. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

EUVD-2026-17269

baserCMS is Vulnerable to Cross-site Scripting...

CVE-2026-5211

creationtimestamp| type| source ---|---|--- 2026-03-31 21:19:34+00:00| seen| Telegram/OA0BhF0tC6EPmRi9BAj0aaRm3q83l75bwQVc9b2koDj48CY 2026-04-01 05:05:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifw6l7rru2t...

CVE-2026-3570

creationtimestamp| type| source ---|---|--- 2026-03-31 20:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mif2szu53t2h...

CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTHPASSWORDVALIDATORS setting which defaults to an empty list, i.e., no specific...

CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTHPASSWORDVALIDATORS setting which defaults to an empty list, i.e., no specific...

CVE-2026-2275

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA 2026-04-01 06:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mig2peqfxt2h 2026-04-04 05:36:38+00:00| seen|...

CVE-2026-3546

creationtimestamp| type| source ---|---|--- 2026-03-31 18:56:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mieu4hq3rv2k...

CVE-2026-5087

creationtimestamp| type| source ---|---|--- 2026-03-31 17:51:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mieqjpuhg62p 2026-04-03 21:17:42+00:00| published-proof-of-concept| Telegram/qTocgF1bA6EikMAxrpKqC2AQPtdVVaE6KTy64KQmK5LJ1E...

GHSA-VPJ2-QQ7W-5QQ6

creationtimestamp| type| source ---|---|--- 2026-03-31 17:25:56+00:00| published-proof-of-concept| Telegram/DQc3fgzqy6DN4suTckTk8JzzlHKPkbNE2HsjPTkc7SF-k...

CVE-2026-34377

creationtimestamp| type| source ---|---|--- 2026-03-31 17:25:34+00:00| published-proof-of-concept| Telegram/8fg0KLkYs5GajJfSXrDS4tPEJWoPqz7hAHWCZfIaMeJCUv0 2026-03-31 18:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mietxbhyfo2i...

GHSA-63MG-XP9J-JFCM

creationtimestamp| type| source ---|---|--- 2026-03-31 17:24:58+00:00| seen| Telegram/ky16Z8CpY9UfGCFQKDuXqskkeRzODLCHisg6zhKBGmfTV8...

CVE-2026-34728

creationtimestamp| type| source ---|---|--- 2026-03-31 17:23:35+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-38m8-xrfj-v38x 2026-04-02 16:51:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijo3vyh242t 2026-04-02 17:37:38+00:00|...

CVE-2026-5272

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 06:19:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116327997434667227 2026-04-01 15:25:32+00:00| seen|...

CVE-2026-5274

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM 2026-04-01 17:01:18+00:00| seen|...

CVE-2026-5291

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:04:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miga5twbwl25 2026-04-01 18:00:00+00:00| seen|...