CVE-2025-35430

creationtimestamp| type| source ---|---|--- 2026-03-10 17:00:08+00:00| seen| https://t.me/truesecator/7979...

CVE-2026-26109

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:20:08+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0084 2026-03-11 03:00:16+00:00| seen|...

CVE-2026-23654

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-11 03:00:16+00:00| seen| https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782 2026-03-11 03:00:20+00:00| seen|...

CVE-2026-25172

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...

CVE-2026-23660

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 18:22:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116206268049523076 2026-03-10 19:15:41+00:00| seen|...

CVE-2026-30944 StudioCMS Affected by Privilege Escalation via Insecure API Token Generation

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocmsapi/dashboard/api-tokens endpoint allows any authenticated user at least Editor to generate API tokens for any other user, including owner and admin accounts. The endpoint fails to...

CVE-2026-30944

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocmsapi/dashboard/api-tokens endpoint allows any authenticated user at least Editor to generate API tokens for any other user, including owner and admin accounts. The endpoint fails to...

GHSA-G644-9GFX-Q4Q4

creationtimestamp| type| source ---|---|--- 2026-03-10 16:29:43+00:00| seen| https://gist.github.com/abhu85/37e5770c487c142ffc50e5429b6fc363...

Exploit for CVE-2026-1492

CVE-2026-1492 CVE-2026-1492 poc -...

WordPress WooCommerce plugin < 10.5.3 - Arbitrary Admin User Creation via CSRF vulnerability

Arbitrary Admin User Creation via CSRF vulnerability discovered by oolongeya in WordPress Plugin WooCommerce versions 10.5.3...

PT-2026-24434

LinkAce is a self-hosted archive to collect website links. When a user creates a link via POST /links, the server fetches HTML metadata from the provided URL LinkRepository::create calls HtmlMeta::getFromUrl. The LinkStoreRequest validation rules do not include NoPrivateIpRule, allowing server-si...

LinkAce 代码问题漏洞

LinkAce is a self-hosted repository developed by Kevin Woblick, designed to collect links to your favorite websites. LinkAce has code vulnerabilities; these vulnerabilities arise from the lack of the NoPrivateIpRule validation rule during link creation, which may lead to server-side request...

Huawei EulerOS: Security Advisory for python-virtualenv (EulerOS-SA-2026-1260)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-24252

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms api/dashboard/api-tokens endpoint allows any authenticated user at least Editor to generate API tokens for any other user, including owner and admin accounts. The endpoint fails t...

CVE-2026-27685

creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/ 2026-03-10 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116202289801188286 2026-03-10 14:56:21+00:00| seen|...

PT-2026-24375

Name of the Vulnerable Software and Affected Versions Giflib affected versions not specified Description Giflib contains a double-free vulnerability stemming from a shallow copy within the GifMakeSavedImage function and inadequate error handling. Triggering this issue may be difficult, but is...

CVE-2025-11739

creationtimestamp| type| source ---|---|--- 2026-03-10 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0254/ 2026-03-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-04...

CVE-2026-30837

creationtimestamp| type| source ---|---|--- 2026-03-09 23:07:15+00:00| published-proof-of-concept| https://github.com/elysiajs/elysia/security/advisories/GHSA-f45g-68q3-5w8x 2026-03-10 22:10:06+00:00| seen| https://gist.github.com/alon710/d6b1fc7825008cc6314a624b23b7b0a9 2026-03-20 16:20:09+00:00...

CVE-2026-30920 OneUptime has broken access control in GitHub App installation flow that allows unauthorized project binding

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installationid values and updates Project.gitHubAppInstallationId with isRoot: true without validating that the caller is authorized for the...

EUVD-2026-10433

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installationid values and updates Project.gitHubAppInstallationId with isRoot: true without validating that the caller is authorized for the...