59066 matches found
CVE-2026-27048
creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:04+00:00| seen| Telegram/uX4TKA0ifXT0knFE-3lZyz36JeQNL4GgXr6yUfz4-1wQtc...
CVE-2026-25002
creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk...
CVE-2026-25007
creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk...
CVE-2026-22512
creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:35+00:00| seen| Telegram/AFZ76yel3WM-XKg00oUEdJJdzUq8UaXb2Zj6ypxdRWKrm8I...
GHSA-CPGW-WGF3-XC6V
creationtimestamp| type| source ---|---|--- 2026-03-26 21:03:16+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mhyivdkgzk2t...
CVE-2026-25306
creationtimestamp| type| source ---|---|--- 2026-03-26 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhyiuuu3sm2o 2026-04-09 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj23blrhm62h...
CVE-2026-34200
creationtimestamp| type| source ---|---|--- 2026-03-26 21:00:04+00:00| published-proof-of-concept| Telegram/EErZ2DHOfxeZ1Fjlnav1XzXAT9awV59GDGk5YYfJrqej7U 2026-03-31 17:25:19+00:00| seen| Telegram/nw5w-ohs-CK0Rjuv5tJSQsl41JpqhSQHTKMS4QN8816OY...
CVE-2026-33940
creationtimestamp| type| source ---|---|--- 2026-03-26 20:59:50+00:00| published-proof-of-concept| https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6 2026-03-27 22:24:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35w4bscs2s...
CVE-2026-33541 TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...
CVE-2026-33541
CVE-2026-33541 affects TSPortal prior to version 34. A validation logic side effect allowed creation of arbitrary user records in the database, as invalid usernames were supposed to be rejected but a side effect caused records to be created regardless of request success, enabling uncontrolled dat...
CVE-2026-33541 TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...
CVE-2026-33541 TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...
CVE-2026-33529 Zoraxy: Authenticated Path Traversal in Config Import leads to RCE
Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. Prior to version 3.3.2, an authenticated path traversal vulnerability in the configuration import endpoint allows an authenticated user to write arbitrary files outside the config directory, which can lead to RCE by creating a...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the revision controllers. An attacker can access entry revisions and view sensitive field values and blueprint data by bypassing authorization checks with authenticated Control Panel access. Users may also creat...
CVE-2026-26074
creationtimestamp| type| source ---|---|--- 2026-03-26 18:58:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhybwb2tdh2e 2026-03-31 05:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midgjihdb62c...
CVE-2026-4923
creationtimestamp| type| source ---|---|--- 2026-03-26 18:56:15+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mhybs4t2sk27 2026-03-26 20:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhygeac6dl2i...
CVE-2026-4926
creationtimestamp| type| source ---|---|--- 2026-03-26 18:55:29+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mhybqr5nz227 2026-03-26 20:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfjwhnel27 2026-03-26 21:01:16+00:00| seen|...
CVE-2026-33009
creationtimestamp| type| source ---|---|--- 2026-03-26 18:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyb5mpmwy2d 2026-03-26 22:22:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyndnlegi2d...
SQL Injection
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to SQL Injection via the fixCleanTitle function. An attacker can access sensitive database information by injecting crafted input into the cleantitle or id parameters...