CVE-2026-32730

creationtimestamp| type| source ---|---|--- 2026-03-18 19:48:51+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-v9xm-ffx2-7h35 2026-03-18 23:20:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhemshlyzm2u 2026-03-24 23:40:08+00:00| seen|...

UNIX Symbolic Link (Symlink) Following

Overview org.jenkins-ci.main:jenkins-core is an open source automation server. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during the extraction of .tar and .tar.gz archives when symbolic links are present. An attacker can create or overwrite arbitrary...

CVE-2026-33319

creationtimestamp| type| source ---|---|--- 2026-03-18 17:15:04+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-w5ff-2mjc-4phc 2026-03-22 16:17:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33319 2026-03-22...

CVE-2026-33017

creationtimestamp| type| source ---|---|--- 2026-03-18 17:00:00+00:00| confirmed| https://medium.com/@aviral23/cve-2026-33017-how-i-found-an-unauthenticated-rce-in-langflow-by-reading-the-code-they-already-dc96cdce5896 2026-03-18 17:00:00+00:00| published-proof-of-concept|...

0xkit (=0.0.1), 0xpass (>=0.0.11 <=0.1.26) +7893 more potentially affected by unknown CVE via h3 (>=0.2.12 <=1.15.5)

h3 NPM version =0.2.12, =0.0.11, =0.0.0-canary-3a59770274bcb6f3bebd5d1b93a2c92d1fc4edbd, =0.0.2, =0.1.0, =1.1.0, =0.1.0, =0.1.0, =1.0.21, =2.0.0, =0.1.4, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WR4H-V87W-P3R7...

CVE-2026-2559

Post SMTP for WordPress is vulnerable up to version 3.8.0 due to a missing capability check in handle_office365_oauth_redirect() (hooked to admin_init without current_user_can() or nonce verification). Authenticated attackers with Subscriber level access+ can overwrite the Office 365 OAuth config...

CVE-2026-32947

creationtimestamp| type| source ---|---|--- 2026-03-18 14:38:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhdpnlum2t2i 2026-03-20 06:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhu5qlpr62k...

CVE-2026-32693

creationtimestamp| type| source ---|---|--- 2026-03-18 12:46:37+00:00| published-proof-of-concept| https://github.com/juju/juju/security/advisories/GHSA-439w-v2p7-pggc 2026-03-18 13:41:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdmimio6d26 2026-03-18 16:11:43+00:00|...

CVE-2025-41258

creationtimestamp| type| source ---|---|--- 2026-03-18 12:40:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj22ksx42c 2026-03-25 13:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhv7o2bym32i...

CVE-2026-33230

creationtimestamp| type| source ---|---|--- 2026-03-18 11:48:31+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-gfwx-w7gr-fvh7 2026-03-20 23:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjpqabgms27...

CVE-2026-23246

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

CVE-2026-23246

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

UBUNTU-CVE-2026-23246

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

CVE-2025-12518

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-12518 Stored XSS in beefree.io

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-71260

creationtimestamp| type| source ---|---|--- 2026-03-18 10:44:04+00:00| seen| https://swecyb.com/ap/users/116080658609901341/statuses/116249741149530242 2026-03-19 05:48:17+00:00| published-proof-of-concept| https://t.me/P0x3k1N73LL1G3NC3/301 2026-03-19 14:30:50+00:00| seen|...

CVE-2026-23246 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

CVE-2026-23246

CVE-2026-23246 affects the Linux kernel wifi mac80211 bounds-check in the ML Reconfiguration path. The issue arises from linking link_id (0-15) to the link_removal_timeout array (size 15), allowing an out-of-bounds write when link_id equals 15. The advisories state to skip subelements with link_i...

CVE-2026-23246 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

CVE-2026-23246

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...