CVE-2026-23486 Blinko: Unauthorized User Information Leak

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4...

CVE-2026-33517

creationtimestamp| type| source ---|---|--- 2026-03-23 19:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33517 2026-03-23 22:39:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr4ufbdb72g...

CVE-2026-33532

creationtimestamp| type| source ---|---|--- 2026-03-23 18:31:32+00:00| published-proof-of-concept| https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp 2026-03-26 19:16:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33532 2026-03-27...

WordPress Appmax plugin <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint vulnerability

Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint vulnerability discovered by WordFence in WordPress Plugin Appmax versions = 1.0.3...

CVE-2026-30498

creationtimestamp| type| source ---|---|--- 2026-03-23 18:00:04+00:00| seen| https://t.me/GithubRedTeam/76860...

CVE-2025-71263

creationtimestamp| type| source ---|---|--- 2026-03-23 17:01:18+00:00| seen| https://bsky.app/profile/krutonium.social.treehouse.systems.ap.brid.gy/post/3mhqjxjbr7in2...

CVE-2026-33697

creationtimestamp| type| source ---|---|--- 2026-03-23 15:52:32+00:00| confirmed| https://github.com/ultravioletrs/cocos/security/advisories/GHSA-vfgg-mvxx-mgg7 2026-03-27 01:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4nni6v2s 2026-03-27 01:00:25+00:00| seen|...

CVE-2026-22895

creationtimestamp| type| source ---|---|--- 2026-03-23 14:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

CERTFR-2026-ACT-012

creationtimestamp| type| source ---|---|--- 2026-03-23 14:33:22+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mhqbpels6z2c 2026-03-23 14:33:23+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116278978230489798 2026-03-23 20:10:00+00:00| seen|...

CVE-2019-25544

A flaw was found in Pidgin. Local attackers can exploit this denial of service vulnerability by providing an excessively long username string during account creation. This can cause the application to crash when joining a chat, leading to the application becoming unavailable. Mitigation Red Hat i...

CVE-2026-4580

creationtimestamp| type| source ---|---|--- 2026-03-23 12:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq4cdl5zg2d 2026-04-04 20:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miozkvwmgl2c...

CVE-2025-41007 SQL Injection in Cuantis

SQL Injection in Cuantis. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'search' parameter in the '/search.php' endpoint...

CVE-2026-4602

creationtimestamp| type| source ---|---|--- 2026-03-23 08:36:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpnqwag7l27 2026-03-24 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhri3l3h2r2p 2026-07-01 14:18:42+00:00| seen|...

CVE-2026-4579

creationtimestamp| type| source ---|---|--- 2026-03-23 08:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpmw2vjpc2d...

CVE-2026-33236

A flaw was found in NLTK Natural Language Toolkit, a suite of open-source Python modules for Natural Language Processing. The NLTK downloader does not validate subdir and id attributes when processing remote XML index files. A remote attacker can exploit this path traversal vulnerability by...

CVE-2026-4598

creationtimestamp| type| source ---|---|--- 2026-03-23 06:18:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhpg2gjcl525 2026-03-23 11:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpz3lhrtk2e...

CVE-2026-4570

creationtimestamp| type| source ---|---|--- 2026-03-23 04:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4570...

CVE-2026-4569

creationtimestamp| type| source ---|---|--- 2026-03-23 03:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4569...

Blinko 操作系统命令注入漏洞

Blinko is an open-source AI-based card-based note-taking app designed for users who want to quickly capture and organize fleeting ideas. Prior to Blinko 1.8.4, there was a vulnerability related to operating system command injection. This vulnerability stemmed from the MCP server’s creation...

PT-2026-27216

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerability, allowing attackers to post comments on any note including private notes without authorization, even if the note has not been publicly shared. The...