CVE-2025-69241

creationtimestamp| type| source ---|---|--- 2026-03-16 12:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-69236/...

CVE-2025-11500

creationtimestamp| type| source ---|---|--- 2026-03-16 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-11500/...

CVE-2022-50845

creationtimestamp| type| source ---|---|--- 2026-03-16 08:05:20+00:00| seen| https://gist.github.com/joxd11222/1058f2b3d98f53fdb469fe874745a6ee...

PT-2026-25801

Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The parameters date start and date end from $ REQUEST are embedded directly into a raw SQL string without proper sanitization. Although Database::escape...

Chamilo LMS SQL注入漏洞

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Versions of Chamilo LMS prior to 1.11.34 contained a SQL injection vulnerability. This vulnerability stemmed fro...

CVE-2026-4172

creationtimestamp| type| source ---|---|--- 2026-03-15 13:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116233431470559225...

CVE-2026-4164

creationtimestamp| type| source ---|---|--- 2026-03-15 05:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116231426999598589 2026-03-15 10:30:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116232724533104511...

CVE-2026-4188

creationtimestamp| type| source ---|---|--- 2026-03-14 22:40:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116229933334659076 2026-03-16 00:00:50+00:00| seen| https://infosec.exchange/users/offseq/statuses/116235910700950766...

CVE-2026-32771

creationtimestamp| type| source ---|---|--- 2026-03-14 14:26:39+00:00| published-proof-of-concept| https://github.com/ctfer-io/monitoring/security/advisories/GHSA-f7cq-gvh6-qr25 2026-03-20 02:23:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhhjyk5tz2n...

`tracing-ethers` was removed from crates.io due to malicious code

The tracing-ethers crate attempted to exfiltrate ssh keys to an app hosted on vercel.app The malicious crate had 9 version published on 2026-03-09 approximately 5 days before removal and had no evidence of actual downloads. There were no crates depending on this crate on crates.io. Thanks to the...

GHSA-VMHQ-CQM9-6P7Q

creationtimestamp| type| source ---|---|--- 2026-03-14 11:10:05+00:00| seen| https://gist.github.com/alon710/fec06abe0c60c3d8e76294f40a120083 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

CVE-2026-32635

creationtimestamp| type| source ---|---|--- 2026-03-14 03:10:06+00:00| seen| https://gist.github.com/alon710/d9b4a060fe174b9be8c2cbbf551e46b6 2026-03-17 10:52:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhasllt7l42i 2026-03-17 19:19:33+00:00| seen|...

GHSA-R48F-3986-4F9C

creationtimestamp| type| source ---|---|--- 2026-03-13 22:10:05+00:00| seen| https://gist.github.com/alon710/bb04f714299eb60050b5b59f56f5af44...

EUVD-2026-11744

wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activationkey, subscriptiondate, and importedfrom parameters to manipulate...

GHSA-VH9H-29PQ-R5M8

creationtimestamp| type| source ---|---|--- 2026-03-13 16:40:06+00:00| seen| https://gist.github.com/alon710/358c252196e7720a9583d07702e8374c...

CVE-2026-32313

creationtimestamp| type| source ---|---|--- 2026-03-13 10:49:25+00:00| published-proof-of-concept| https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-4v26-v6cg-g6f9 2026-03-22 03:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmkiyub4v2h...

GHSA-XG2Q-62G2-CVCM

creationtimestamp| type| source ---|---|--- 2026-03-13 10:40:05+00:00| seen| https://gist.github.com/alon710/be322fbd1c6dbc2c5db3537c606b3df9...

GHSA-3Q28-QJRV-QR39

creationtimestamp| type| source ---|---|--- 2026-03-13 10:10:06+00:00| seen| https://gist.github.com/alon710/511ae37ea808f7a384da02de9d2e30d1...

CVE-2026-22193

wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activationkey, subscriptiondate, and importedfrom parameters to manipulate...

CVE-2026-22193

wpDiscuz plugin (before version 7.6.47) contains an SQL injection in getAllSubscriptions caused by improper quote escaping for parameters email, activation_key, subscription_date, and imported_from. This allows altering queries and potentially exfiltrating sensitive data. CVSS metrics indicate hi...