CVE-2026-30881 Chamilo LMS: SQL Injection in the statistics AJAX endpoint

Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The parameters datestart and dateend from $REQUEST are embedded directly into a raw SQL string without proper sanitization. Although Database::escapestrin...

CVE-2026-30882

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30882...

CVE-2026-28430

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-28430 2026-03-17 00:00:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116241573279155444 2026-03-18 22:14:51+00:00| seen|...

CVE-2026-32267

creationtimestamp| type| source ---|---|--- 2026-03-16 17:30:31+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-cc7p-2j3x-x7xf 2026-03-16 19:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32267 2026-03-17...

CVE-2025-62404

creationtimestamp| type| source ---|---|--- 2026-03-16 17:00:29+00:00| seen| https://infosec.place/objects/3235557a-973e-4707-a5a1-6216a897e9f4...

OPENSUSE-SU-2026:20364-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. bsc1257908...

SUSE-SU-2026:20744-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. bsc1257908...

CERTFR-2026-ACT-011

creationtimestamp| type| source ---|---|--- 2026-03-16 13:21:17+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116239058462914309...

CVE-2025-69241

creationtimestamp| type| source ---|---|--- 2026-03-16 12:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-69236/...

CVE-2025-11500

creationtimestamp| type| source ---|---|--- 2026-03-16 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-11500/ 2026-08-21 05:33:10+00:00| seen| https://bsky.app/profile/secqube.com/post/3mtkzwezxwz25...

CVE-2022-50845

creationtimestamp| type| source ---|---|--- 2026-03-16 08:05:20+00:00| seen| https://gist.github.com/joxd11222/1058f2b3d98f53fdb469fe874745a6ee...

Chamilo LMS SQL注入漏洞

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Versions of Chamilo LMS prior to 1.11.34 contained a SQL injection vulnerability. This vulnerability stemmed fro...

PT-2026-25801

Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The parameters date start and date end from $ REQUEST are embedded directly into a raw SQL string without proper sanitization. Although Database::escape...

CVE-2026-4172

creationtimestamp| type| source ---|---|--- 2026-03-15 13:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116233431470559225...

CVE-2026-4164

creationtimestamp| type| source ---|---|--- 2026-03-15 05:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116231426999598589 2026-03-15 10:30:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116232724533104511...

CVE-2026-4188

creationtimestamp| type| source ---|---|--- 2026-03-14 22:40:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116229933334659076 2026-03-16 00:00:50+00:00| seen| https://infosec.exchange/users/offseq/statuses/116235910700950766...

CVE-2026-32771

creationtimestamp| type| source ---|---|--- 2026-03-14 14:26:39+00:00| published-proof-of-concept| https://github.com/ctfer-io/monitoring/security/advisories/GHSA-f7cq-gvh6-qr25 2026-03-20 02:23:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhhjyk5tz2n...

`tracing-ethers` was removed from crates.io due to malicious code

The tracing-ethers crate attempted to exfiltrate ssh keys to an app hosted on vercel.app The malicious crate had 9 version published on 2026-03-09 approximately 5 days before removal and had no evidence of actual downloads. There were no crates depending on this crate on crates.io. Thanks to the...

GHSA-VMHQ-CQM9-6P7Q

creationtimestamp| type| source ---|---|--- 2026-03-14 11:10:05+00:00| seen| https://gist.github.com/alon710/fec06abe0c60c3d8e76294f40a120083 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

CVE-2026-32635

creationtimestamp| type| source ---|---|--- 2026-03-14 03:10:06+00:00| seen| https://gist.github.com/alon710/d9b4a060fe174b9be8c2cbbf551e46b6 2026-03-17 10:52:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhasllt7l42i 2026-03-17 19:19:33+00:00| seen|...