CVE-2026-32596

creationtimestamp| type| source ---|---|--- 2026-03-14 14:53:22+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-wvxv-4j8q-4wjq 2026-03-18 20:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhebok5wgh2s 2026-03-19...

CVE-2026-32634

creationtimestamp| type| source ---|---|--- 2026-03-14 14:52:49+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-vx5f-957p-qpvm 2026-03-18 18:40:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe56nei7t2v 2026-03-19...

GHSA-VMHQ-CQM9-6P7Q

creationtimestamp| type| source ---|---|--- 2026-03-14 11:10:05+00:00| seen| https://gist.github.com/alon710/fec06abe0c60c3d8e76294f40a120083 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

GHSA-R7VR-GR74-94P8

creationtimestamp| type| source ---|---|--- 2026-03-14 07:40:05+00:00| seen| https://gist.github.com/alon710/6da743df5745ff6d76be090631282892 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

CVE-2026-32759

creationtimestamp| type| source ---|---|--- 2026-03-14 07:20:08+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-ffx7-75gc-jg7c 2026-03-14 07:20:08+00:00| published-proof-of-concept|...

GHSA-WCXR-59V9-RXR8

creationtimestamp| type| source ---|---|--- 2026-03-14 06:40:06+00:00| seen| https://gist.github.com/alon710/04f59b4b34fdad62bcd6aca02cca19bb 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

GHSA-RQPP-RJJ8-7WV8

creationtimestamp| type| source ---|---|--- 2026-03-14 05:40:05+00:00| seen| https://gist.github.com/alon710/a3a38049a539db62f7e09fe32adc9717...

GHSA-2RQG-GJGV-84JM

creationtimestamp| type| source ---|---|--- 2026-03-14 05:10:05+00:00| seen| https://gist.github.com/alon710/53513cb5aafafcdaa9513749a5663d41 2026-03-29 15:20:39+00:00| seen| Telegram/nb8fCm1TKw7DFYOlnuooYH-uWzxRBf3GinTZz9uDDCr2nY...

GHSA-5M9R-P9G7-679C

creationtimestamp| type| source ---|---|--- 2026-03-14 04:10:06+00:00| seen| https://gist.github.com/alon710/aed471f71d18a585b1ac6741c86dd8af 2026-03-31 13:19:26+00:00| published-proof-of-concept| Telegram/bc0dtnMAVwN1UZgcMoKZPcvjFdUYL45B0PcMRVU30Ps4cSo...

GHSA-J47W-4G3G-C36V

creationtimestamp| type| source ---|---|--- 2026-03-14 03:40:05+00:00| seen| https://gist.github.com/alon710/f9ee5ebf420bcb9120187c3f53874714...

GHSA-G93W-MFHG-P222

creationtimestamp| type| source ---|---|--- 2026-03-14 03:10:06+00:00| seen| https://gist.github.com/alon710/d9b4a060fe174b9be8c2cbbf551e46b6...

Exploit for Missing Encryption of Sensitive Data in Nginxui Nginx_Ui

CVE-2026-27944 POC: Nginx UI Unauthenticated Backup Download +...

GHSA-44VG-5WV2-H2HG

creationtimestamp| type| source ---|---|--- 2026-03-14 02:40:05+00:00| seen| https://gist.github.com/alon710/1291af57a3f24c084d79b6036abb3239...

GHSA-RVV3-G6HJ-G44X

creationtimestamp| type| source ---|---|--- 2026-03-13 23:10:06+00:00| seen| https://gist.github.com/alon710/d2b6ee2c399fd3a4d218a600dd6d79d1...

CVE-2026-4092

creationtimestamp| type| source ---|---|--- 2026-03-13 22:40:05+00:00| seen| https://gist.github.com/alon710/fc0902837b8b38d00673edb8479ed2ac 2026-04-01 09:34:14+00:00| seen| https://bsky.app/profile/secqube.com/post/3migf6reszd2g...

CVE-2026-32720

creationtimestamp| type| source ---|---|--- 2026-03-13 21:40:05+00:00| seen| https://gist.github.com/alon710/b9663d5e263c3281f512bc473b89c55f 2026-03-14 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116226708412108149...

GHSA-5CXW-W2XG-2M8H

creationtimestamp| type| source ---|---|--- 2026-03-13 21:10:06+00:00| seen| https://gist.github.com/alon710/25afc6b7c80d9d4a2082df7705bf284f...

GHSA-VMHQ-CQM9-6P7Q OpenClaw: `browser.request` let `operator.write` persist admin-only browser profile changes

Summary An authorization mismatch in the gateway let an authenticated caller with only operator.write use browser.request to reach browser profile management routes that persist configuration to disk. In practice, this exposed an admin-only configuration write primitive through /profiles/create...

CVE-2026-29079

Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fields via an unsafe cast, corrupting th...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the handling of temporary file creation and population in the sandboxed file system bridge. An attacker can write arbitrary data...