CVE-2026-30580

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system...

CVE-2026-33501

creationtimestamp| type| source ---|---|--- 2026-03-20 18:08:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-96qp-8cmq-jvq8 2026-03-22 00:26:06+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/384 2026-03-23 16:16:51+00:00| seen|...

CVE-2026-33488

creationtimestamp| type| source ---|---|--- 2026-03-20 17:01:36+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-6m5f-j7w2-w953 2026-03-23 16:52:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqjhu2up52p 2026-03-25 03:40:08+00:00| seen|...

CVE-2026-33482

creationtimestamp| type| source ---|---|--- 2026-03-20 14:59:56+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pmj8-r2j7-xg6c 2026-03-23 15:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqereajdu2p 2026-03-23 16:15:54+00:0...

CVE-2026-33476

creationtimestamp| type| source ---|---|--- 2026-03-20 13:54:07+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hhgj-gg9h-rjp7 2026-03-20 23:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnnk52zv2d 2026-03-20...

CVE-2026-33130

creationtimestamp| type| source ---|---|--- 2026-03-20 13:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhinb7ryye2y...

CVE-2026-33136

creationtimestamp| type| source ---|---|--- 2026-03-20 13:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimnjfqen2v 2026-03-20 20:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjdop7oek23 2026-03-20 21:27:14+00:00| seen|...

Improper Access Control

OneUptime is vulnerable to Improper Access Control. The vulnerability is due to missing authorization checks on account creation APIs, which allows a low-privileged user to create new accounts via direct API requests...

CVE-2026-26939

creationtimestamp| type| source ---|---|--- 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q...

CVE-2026-33135

creationtimestamp| type| source ---|---|--- 2026-03-20 13:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhilkylyqa2e 2026-03-20 21:27:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjhgghtkz2v 2026-03-21 02:00:14+00:00| seen|...

BIT-PARSE-2026-32742 Parse Server session creation endpoint allows overwriting server-generated session fields

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.42, an authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST /classes/Session. Thi...

GHSA-VFFH-C9PQ-4CRH

creationtimestamp| type| source ---|---|--- 2026-03-20 11:01:10+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mhieh5zt7i2u 2026-03-20 13:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhinb7ryye2y...

CVE-2026-22324

creationtimestamp| type| source ---|---|--- 2026-03-20 10:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhie4lol652n 2026-03-20 22:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjjcpva442n...

CVE-2026-27625

creationtimestamp| type| source ---|---|--- 2026-03-20 10:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhidtnalex2n 2026-03-20 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjjd2f64525 2026-03-20 22:16:44+00:00| seen|...

CVE-2026-23276

creationtimestamp| type| source ---|---|--- 2026-03-20 09:56:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiaswp37z2n 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-23278

creationtimestamp| type| source ---|---|--- 2026-03-20 09:51:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiajwznmn2k 2026-04-02 11:20:24+00:00| published-proof-of-concept| Telegram/euuTNLHWqQ9WQ8BRrqx3D2j20F4fUhaWZjV5ERyBbML11kM 2026-07-02 05:47:44+00:00| seen|...

CVE-2026-32595

creationtimestamp| type| source ---|---|--- 2026-03-20 09:44:00+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-g3hg-j4jv-cwfr 2026-03-20 13:05:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilexmpip2n 2026-03-20 13:58:56+00:00|...

CVE-2026-4458

creationtimestamp| type| source ---|---|--- 2026-03-20 07:22:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116260295615191694 2026-03-22 00:02:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmakgu54z26 2026-03-24 01:00:00+00:00| seen|...

CVE-2026-4468

creationtimestamp| type| source ---|---|--- 2026-03-20 06:28:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhvagjsze2u...

CVE-2026-21992

creationtimestamp| type| source ---|---|--- 2026-03-20 06:01:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116259977375105317 2026-03-20 13:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilf4nf2c2s 2026-03-20 13:09:35+00:00| seen|...