CVE-2025-70341

creationtimestamp| type| source ---|---|--- 2026-03-04 15:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mganfkuezh24 2026-03-04 16:21:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaouhkimj2s...

CVE-2026-29042

creationtimestamp| type| source ---|---|--- 2026-03-04 15:35:20+00:00| published-proof-of-concept| https://github.com/nuclio/nuclio/security/advisories/GHSA-95fj-3w7g-4r27 2026-03-06 08:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeup23stc27...

CVE-2026-23231

creationtimestamp| type| source ---|---|--- 2026-03-04 13:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116171167248426886 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-31 20:00:00+00:00| seen|...

CVE-2026-29065

creationtimestamp| type| source ---|---|--- 2026-03-04 09:52:13+00:00| published-proof-of-concept| https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-25g8-2mcf-fcx9 2026-03-06 07:54:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeti7qkgh2n...

CVE-2026-29119

creationtimestamp| type| source ---|---|--- 2026-03-04 09:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7yy7rehi2k...

CVE-2026-28773

creationtimestamp| type| source ---|---|--- 2026-03-04 08:23:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7u6yydgj2o...

CVE-2026-28772

creationtimestamp| type| source ---|---|--- 2026-03-04 07:49:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7sbhoj4d2o...

CVE-2026-3242

creationtimestamp| type| source ---|---|--- 2026-03-04 04:26:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7gwepksc2u...

CVE-2026-1273

creationtimestamp| type| source ---|---|--- 2026-03-04 04:07:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7ftttxn32e...

CVE-2026-3241

creationtimestamp| type| source ---|---|--- 2026-03-04 03:56:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7fbrgabw2u...

CVE-2026-0023

In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-52998

Chamilo is a learning management system. Prior to version 1.11.30, in the application, deserialization of data is performed, the data can be spoofed. An attacker can create objects of arbitrary classes, as well as fully control their properties, and thus modify the logic of the web application's...

SUSE CVE-2026-25791

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored...

SUSE CVE-2026-26056

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...

SUSE CVE-2026-27598

Dagu is a workflow engine with a built-in Web user interface. In versions up to and including 1.16.7, the CreateNewDAG API endpoint POST /api/v1/dags does not validate the DAG name before passing it to the file store. An authenticated user with DAG write permissions can write arbitrary YAML files...

CVE-2026-2363

creationtimestamp| type| source ---|---|--- 2026-03-04 00:12:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6ypvbdzz2k 2026-03-04 07:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7stjmw742e...

PT-2026-23113

Name of the Vulnerable Software and Affected Versions Drupal OpenID Connect / OAuth client versions prior to 1.5.0 Description A Server-Side Request Forgery SSRF issue exists in the OpenID Connect / OAuth client module of Drupal. This flaw stems from insufficient validation of data received from...

The vulnerability of the qla2x00_create_host() function in the drivers/scsi/qla2xxx/qla_os.c driver module of the Linux SCSI device kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla2x00createhost function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Craft CMS 安全漏洞

Craft CMS is an open-source content management system developed by Craft CMS. Versions prior to Craft CMS 4.17.0-beta.1 and 5.9.0-beta.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of validation during the creation of entries, allowing large amounts of values t...

📄 WordPress AI Engine 3.1.3 Mass Enumeration

This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...