CVE-2026-32877

creationtimestamp| type| source ---|---|--- 2026-03-30 22:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micnzxtlyh2w 2026-03-30 22:03:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mico4444la2m 2026-03-30 23:20:18+00:00| seen|...

CVE-2026-34558

creationtimestamp| type| source ---|---|--- 2026-03-30 22:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micnzfpzw42s 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q 2026-03-30 23:20:23+00:00| published-proof-of-concept|...

CVE-2026-31799 Tautulli: SQL Injection in get_home_stats API endpoint via unsanitised filter parameters

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. From version 2.14.2 to before version 2.17.0 for parameters "before" and "after" and from version 2.1.0-beta to before version 2.17.0 for parameters "sectionid" and "userid", the /api/v2?cmd=gethomestats endpoint passe...

CVE-2026-31799

CVE-2026-31799 affects Tautulli (Python-based Plex monitor) where the /api/v2?cmd=get_home_stats endpoint passes query parameters (section_id, user_id, before, after) directly into SQL via Python %-string formatting without parameterization, from versions 2.14.2–2.16.x (before 2.17.0) for certain...

Zebra has a Consensus Failure due to Improper Verification of V5 Transactions

--- CVE-2026-34377: Consensus Failure via Crafted V5 Authorization Data Summary A logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction's txid while providing invalid authorization data, a miner could cause...

CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...

CVE-2026-32285

creationtimestamp| type| source ---|---|--- 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo 2026-05-06 14:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b...

CVE-2026-5124

A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Header Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-3991

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0378/ 2026-03-30 19:18:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevqbsxx27 2026-03-30 20:50:07+00:00| seen|...

CVE-2026-30566

creationtimestamp| type| source ---|---|--- 2026-03-30 16:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2l5ttyr2o...

CVE-2026-23396 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23396 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28528

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

CVE-2025-23217 vulnerabilities

Vulnerabilities for packages: mitmproxy...

CVE-2026-5121

creationtimestamp| type| source ---|---|--- 2026-03-30 12:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmfwrwoo22 2026-03-31 17:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mienofpx762r 2026-03-31 17:24:25+00:00| published-proof-of-concept|...

CVE-2026-5034

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /editcostumer.php of the component Parameter Handler. This manipulation of the argument cosid causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-5128

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-34716

creationtimestamp| type| source ---|---|--- 2026-03-30 08:29:09+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-w4hp-w536-jg64 2026-03-31 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifa6vdvem2i...

CVE-2026-5031

A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely...

PT-2026-29168

--- CVE-2026-34377: Consensus Failure via Crafted V5 Authorization Data Summary A logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction's txid while providing invalid authorization data, a miner could cause...

Code-Projects Accounting System SQL注入漏洞

Code-Projects Accounting System is an accounting system open sourced by Code-Projects. Version 1.0 of Code-Projects Accounting System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter cosid in the file/viewincostumer.php of the Component Paramete...