CVE-2026-2992 KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the /wp-json/kivicare/v1/setup-wizard/clinic REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated...

CVE-2026-32947

creationtimestamp| type| source ---|---|--- 2026-03-18 14:38:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhdpnlum2t2i 2026-03-20 06:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhu5qlpr62k...

CVE-2026-33230

creationtimestamp| type| source ---|---|--- 2026-03-18 11:48:31+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-gfwx-w7gr-fvh7 2026-03-20 23:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjpqabgms27...

UBUNTU-CVE-2026-23243

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite computes datalen from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, datalen can become negative and...

CVE-2025-71258

creationtimestamp| type| source ---|---|--- 2026-03-18 10:43:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-71258.yaml 2026-03-18 10:44:05+00:00| seen| https://swecyb.com/ap/users/116080658609901341/statuses/116249741149530242 2026-03-1...

CVE-2025-11158

creationtimestamp| type| source ---|---|--- 2026-03-18 10:34:03+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhdbyt663r2t 2026-03-20 06:33:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhhvhqorml2t 2026-05-25 01:07:08+00:00| seen|...

CVE-2026-22318

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22318 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-32265

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32265...

CVE-2026-33058

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33058 2026-03-18 16:34:17+00:00| seen| https://bsky.app/profile/cydave.bsky.social/post/3mhdw4uc4w225 2026-03-19 09:28:13+00:00| seen|...

CVE-2026-31938

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31938 2026-03-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116248296001564766 2026-03-18 04:30:30+00:00| seen|...

CVE-2026-2092

creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchte54ry2f...

CVE-2019-25520

creationtimestamp| type| source ---|---|--- 2026-03-18 00:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcast6wsr2w...

CVE-2025-55043

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...

CVE-2025-55043

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...

Parse Server 安全漏洞

Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that runs Node.js. There were security vulnerabilities in versions of Parse Server prior to 9.6.0-alpha.17 and 8.6.42. These vulnerabilities stemmed from the ability to override fields...

PT-2026-26081

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality csettings.cfc createBundle method that allows unauthenticated attackers to force administrators to create and save site bundles containing sensitive data to publicly accessible directories. This vulnerabili...

Link following vulnerability allows arbitrary file creation

Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives. This allows crafted archives to write files to arbitrary locations on the filesystem, restricted only by file system access permissions of the user running...

Mura 安全漏洞

Mura is a content management system developed by Mura Corporation. Versions of Mura 10.1.10 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the bundled package creation feature lacking CSRF token validation, which could lead to data leakage...

The vulnerability of the il4965_setup_deferred_work() function in the drivers/net/wireless/intel/iwlegacy/4965-mac.c driver of the Intel wireless communication adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the il4965setupdeferredwork function in the drivers/net/wireless/intel/iwlegacy/4965-mac.c driver for Intel wireless communication drivers in the Linux operating system is related to the assignment of pointers due to the lack of checking the return value of the...

CVE-2026-1376

creationtimestamp| type| source ---|---|--- 2026-03-17 22:32:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbzntn3nf2n 2026-03-18 01:45:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhcehxyjxf2l 2026-03-20 01:40:09+00:00| seen|...