PT-2026-22636

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.301.3 Description NocoDB is software for building databases as spreadsheets. An authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula's unit parameter. The issue affects versions prior...

NocoDB SQL注入漏洞

NocoDB is an open-source alternative to Airtable. It converts any MySQL, PostgreSQL, SQL Server, SQLite, and MariaDB databases into intelligent spreadsheets. Versions of NocoDB prior to 0.301.3 had a SQL injection vulnerability; this vulnerability stemmed from unvalidated unit parameters in the...

CVE-2026-3391

creationtimestamp| type| source ---|---|--- 2026-03-01 14:04:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvt4e4jq2e...

CVE-2026-3383

creationtimestamp| type| source ---|---|--- 2026-03-01 09:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyhbphjvq2o...

CVE-2026-21619

creationtimestamp| type| source ---|---|--- 2026-03-01 06:10:21+00:00| seen| https://gist.github.com/alon710/8322ecdb223d4bba4354b16de7a125f9 2026-03-01 06:25:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfy45whs5l2t 2026-03-07 16:44:49+00:00| seen|...

CVE-2026-3395

creationtimestamp| type| source ---|---|--- 2026-03-01 05:31:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116152277061821134 2026-03-01 15:45:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfz3hulnh32u 2026-03-01 17:43:24+00:00| seen|...

CVE-2026-28507

creationtimestamp| type| source ---|---|--- 2026-03-01 04:30:31+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-37j7-56xc-c468 2026-03-06 05:58:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgemyxfnxq2e...

GHSA-5VRJ-WF7V-5WR7

creationtimestamp| type| source ---|---|--- 2026-03-01 02:10:22+00:00| seen| https://gist.github.com/alon710/74dba3e5da70d59374d9df1bc83c463e...

CVE-2026-28557

creationtimestamp| type| source ---|---|--- 2026-02-28 23:51:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfxg6aocx224...

GHSA-945P-3JHM-6RCP

creationtimestamp| type| source ---|---|--- 2026-02-28 03:40:10+00:00| seen| https://gist.github.com/alon710/43a4ce973e7deb9cb22c759bda6c4252...

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Impact The serialize-javascript npm package versions tags, the injected code executes. javascript const serialize = require'serialize-javascript'; // Create an object that passes instanceof RegExp with a spoofed .flags const fakeRegex = Object.createRegExp.prototype; Object.definePropertyfakeRege...

GHSA-5C6J-R48X-RMVQ Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Impact The serialize-javascript npm package versions tags, the injected code executes. javascript const serialize = require'serialize-javascript'; // Create an object that passes instanceof RegExp with a spoofed .flags const fakeRegex = Object.createRegExp.prototype; Object.definePropertyfakeRege...

CVE-2026-28516

creationtimestamp| type| source ---|---|--- 2026-02-28 00:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuzi6em5h2o 2026-04-14 20:15:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opendciminstallsqlirce.rb 2026-04-15...

CVE-2026-28426

creationtimestamp| type| source ---|---|--- 2026-02-28 00:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuz5v32k32e 2026-02-28 04:26:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvf2xw6ub2u 2026-03-01 02:10:22+00:00| seen|...

Photon OS 4.0: Go PHSA-2026-4.0-0968

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0968. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid300118...

CVE-2026-28270

creationtimestamp| type| source ---|---|--- 2026-02-27 23:54:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuvui4ay42z...

CVE-2026-28272

creationtimestamp| type| source ---|---|--- 2026-02-27 23:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuvljoruf2d 2026-02-28 05:52:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvjus4ru42c 2026-03-04 21:40:10+00:00| seen|...

CVE-2018-25160

creationtimestamp| type| source ---|---|--- 2026-02-27 23:35:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfuut5hylf2w 2026-02-27 23:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuv2vq2yv2u...

CVE-2026-27753

creationtimestamp| type| source ---|---|--- 2026-02-27 21:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuou7iefw2y...

CVE-2019-25496

creationtimestamp| type| source ---|---|--- 2026-02-27 21:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfun5y7zsw2u 2026-03-04 03:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg7da366ut2a...