CVE-2026-29781

creationtimestamp| type| source ---|---|--- 2026-03-04 15:55:45+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-hx52-cv84-jr5v 2026-03-07 15:15:55+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-29781...

CVE-2026-23232

creationtimestamp| type| source ---|---|--- 2026-03-04 15:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgan655ovc2e...

CVE-2026-23233

creationtimestamp| type| source ---|---|--- 2026-03-04 15:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgan2rjusw2u 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

CVE-2026-27442

creationtimestamp| type| source ---|---|--- 2026-03-04 10:13:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mga2dozyrr24...

CVE-2026-1651

creationtimestamp| type| source ---|---|--- 2026-03-04 03:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7f4uyscy2v...

CVE-2026-1980

The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'getcustomerlist' route in all versions up to, and including, 1.0.8. This makes it possible for unauthenticated attackers to retrieve sensitive customer information includin...

CVE-2026-27981

creationtimestamp| type| source ---|---|--- 2026-03-04 00:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6z4lab5b2v 2026-03-05 20:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgdnsoog7p2e...

CVE-2026-0540

creationtimestamp| type| source ---|---|--- 2026-03-03 20:43:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6n2wcroi2u...

CVE-2025-69765

creationtimestamp| type| source ---|---|--- 2026-03-03 19:55:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6kf3l6w62n...

CVE-2026-3136

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...

CVE-2026-3136

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...

EUVD-2026-9302

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...

CVE-2026-3136

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...

CVE-2025-48613

creationtimestamp| type| source ---|---|--- 2026-03-03 16:22:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg66hh7b7h2d...

CVE-2026-28518

creationtimestamp| type| source ---|---|--- 2026-03-03 15:26:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg63d4ft7v2x 2026-03-03 16:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg67itz6ra2x 2026-04-18 04:07:08+00:00| seen|...

RUSTSEC-2026-0030 `time_calibrator` was removed from crates.io due to malicious code

It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...

CVE-2026-26288

creationtimestamp| type| source ---|---|--- 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08 2026-03-06 17:04:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfs72eq4o2n 2026-03-07 04:30:32+00:00| seen|...

CVE-2026-3455

creationtimestamp| type| source ---|---|--- 2026-03-03 08:16:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg5dckpsdm2u...

CVE-2024-55024

An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to perform Administrative actions using service accounts...

PT-2026-22781

Name of the Vulnerable Software and Affected Versions Weintek cMT-3072XH2 easyweb version 2.1.53, OS version 20231011 Description An authentication bypass exists in the authorization mechanism of the software. This allows unauthorized attackers to perform administrative actions using service...