CVE-2026-34603

creationtimestamp| type| source ---|---|--- 2026-04-01 18:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihcrqz64w2i 2026-04-03 17:26:02+00:00| published-proof-of-concept| Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks 2026-04-08 07:40:08+00:00| seen|...

CVE-2026-34604

creationtimestamp| type| source ---|---|--- 2026-04-01 18:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihc2ydh7y25 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ 2026-04-08 08:00:15+00:00| seen|...

CVE-2026-34445

creationtimestamp| type| source ---|---|--- 2026-04-01 18:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihbib4dmj2q 2026-04-02 06:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijq7xfra2t 2026-04-02 06:01:43+00:00| seen|...

CVE-2026-33276

Stored cross-site scripting XSS in Checkmk 2.5.0 beta before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search feature...

CVE-2026-3877

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:18+00:00| published-proof-of-concept| Telegram/olwODmUlHzKZbEJSW7LVNU33CLgdNztsPJfFMY6W51dkA 2026-04-01 15:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mih245az3x23...

CVE-2026-34430

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 16:29:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4frky4p2r 2026-04-01 16:50:34+00:00| seen|...

CVE-2025-9497

creationtimestamp| type| source ---|---|--- 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM...

GHSA-VC8F-X9PP-WF5P

creationtimestamp| type| source ---|---|--- 2026-04-01 15:25:32+00:00| seen| Telegram/4zYpYE5e92FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM...

CVE-2026-22767

creationtimestamp| type| source ---|---|--- 2026-04-01 15:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migypf3ceh2n 2026-04-01 15:25:59+00:00| seen| Telegram/4u6pNJfi3nLv5HBYbkAVRO5hA7CasKnKFj2guWNAP2iZfQ 2026-04-01 16:09:03+00:00| seen|...

CVE-2026-2948

creationtimestamp| type| source ---|---|--- 2026-04-01 15:03:43+00:00| seen| https://bsky.app/profile/eta.kyte.wtf/post/3migxlxa2ls2g 2026-05-05 06:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kbmoild2o...

CVE-2026-5255

creationtimestamp| type| source ---|---|--- 2026-04-01 08:50:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migcqymasv23...

CVE-2026-5256

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 08:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i 2026-04-04 05:00:15+00:00| seen|...

CVE-2026-32734

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue has been patched in version 5.2.3...

CVE-2026-32927

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 00:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihy4xrmbl23 2026-04-02 01:18:28+00:00| seen| Telegram/7rLczVeBBv6SSIB10Z8cqxb4bee2TcHdurxt5OLTZQuJPU...

CVE-2026-32926

creationtimestamp| type| source ---|---|--- 2026-04-01 03:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90448293/ 2026-04-02 00:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihyoumk472s 2026-04-02 01:18:12+00:00| seen| Telegram/Bkkez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48...

CVE-2025-13855

creationtimestamp| type| source ---|---|--- 2026-04-01 03:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mifp7aucs22m 2026-04-01 03:17:49+00:00| published-proof-of-concept| Telegram/rQGGJNosiE90GfC4CPODN8OMH2HUk0rxa4zVhsu5hB7e0 2026-04-03 14:40:10+00:00| seen|...

CVE-2026-34548

creationtimestamp| type| source ---|---|--- 2026-04-01 02:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmly4dqe22...

CVE-2026-5237

creationtimestamp| type| source ---|---|--- 2026-04-01 01:15:30+00:00| published-proof-of-concept| Telegram/I7gM78d3mp9wugorspZkHmlDKuo-8DymFEq-4a44ip7mrow 2026-04-01 02:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifosvbro624...

Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Summary Ash.Type.Module.castinput/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has ...

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user input when creating or editing blog articles in the category section, which could lea...