Blinko 安全漏洞

Blinko is an open-source AI-based card-based note-taking application designed for users who want to quickly capture and organize fleeting ideas. Versions of Blinko prior to 1.8.4 contained security vulnerabilities. These vulnerabilities stemmed from unauthorized access to the/api/v1/comment/creat...

PT-2026-27217

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP Model Context Protocol server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4...

PT-2026-27214

Name of the Vulnerable Software and Affected Versions Blinko versions prior to 1.8.4 Description A publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. The affected software is an AI-powered card note-taking project. The issue was...

CVE-2026-4551

creationtimestamp| type| source ---|---|--- 2026-03-22 16:34:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnxyhx3sw2k...

EUVD-2019-19930

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

CVE-2019-25606

creationtimestamp| type| source ---|---|--- 2026-03-22 15:09:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhntan233m2o...

CVE-2019-25594

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

CVE-2019-25610

creationtimestamp| type| source ---|---|--- 2026-03-22 14:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnppmqv622n...

CVE-2019-25594

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

CVE-2019-25594

CVE-2019-25594 affects ASPRunner.NET 10.1. The vulnerability is a denial-of-service caused by accepting an excessively long table name string during database table creation, with attackers able to crash the application by supplying up to 10,000 characters in the table name parameter. It is a loca...

CVE-2019-25594 ASPRunner.NET 10.1 Denial of Service via Table Name Field

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...

CVE-2019-25592

PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field. Attackers can paste a buffer of 10000 characters into the Name field during dashboard creation to trigger an...

CVE-2026-4558

creationtimestamp| type| source ---|---|--- 2026-03-22 08:11:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116271813198950896 2026-03-22 18:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mho52thwyc2o 2026-03-22 19:18:35+00:00| seen|...

CVE-2025-71276

creationtimestamp| type| source ---|---|--- 2026-03-22 06:12:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmvaswclu2d...

CVE-2026-4449

creationtimestamp| type| source ---|---|--- 2026-03-22 04:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmnvmckqv2x 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

CVE-2019-25588

creationtimestamp| type| source ---|---|--- 2026-03-22 03:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmnq5b62v2o...

CVE-2026-4445

creationtimestamp| type| source ---|---|--- 2026-03-22 03:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmkkuesyn2t 2026-03-22 03:01:17+00:00| seen| https://bsky.app/profile/potato.software/post/3mhmkkvescb2u 2026-03-24 01:00:00+00:00| seen|...

CVE-2026-32043

creationtimestamp| type| source ---|---|--- 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-4451

creationtimestamp| type| source ---|---|--- 2026-03-22 02:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmh6n5eks2d 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

PYSEC-2026-38

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...