EUVD-2026-14502

AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php...

EUVD-2026-14925

Vikjuna: Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation...

CVE-2026-30976

Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files containing API keys and database credentials, Windows...

EUVD-2026-14500

AVideo vulnerable to IP Address Spoofing via Untrusted HTTP Headers in getRealIpAddr...

Information Exposure

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Information Exposure via the userRecoverPass.php endpoint. An attacker can obtain information about the existence and status of user accounts by sending crafted...

Missing Authorization

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authorization due to missing authentication and authorization checks in the reports.json.php and getData.json.php endpoints. An attacker can access sensiti...

EUVD-2026-14494

AVideo vulnerable to Stored XSS via htmlentitydecode Reversing xssesc Sanitization in Channel About Field...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats-top, nats, telegraf...

GHSA-FCJP-H8CC-6879 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats-top, nats, telegraf...

GHSA-V722-JCV5-W7MC vulnerabilities

Vulnerabilities for packages: kine, k3s, nats-top, nats, telegraf...

CVE-2026-33218 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats-top, nats, telegraf...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, nats-top...

CVE-2025-64324 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64433 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PWX7-FX9R-HR4H vulnerabilities

Vulnerabilities for packages: rke2-runtime, k3s, kine, nats-top, prometheus-nats-exporter, milvus, nats-top-fips, telegraf, rke2-runtime-fips, nats, prometheus-nats-exporter-fips, nats-fips...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: rke2-runtime, k3s, kine, nats-top, prometheus-nats-exporter, milvus, nats-top-fips, telegraf, rke2-runtime-fips, nats, prometheus-nats-exporter-fips, nats-fips...

CVE-2026-33749

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft a workflow that produces an HTML binary data object without a filename. The /rest/binary-data endpoint served such...

CVE-2026-33720

n8n is an open source workflow automation platform. Prior to version 2.8.0, when the N8NSKIPAUTHONOAUTHCALLBACK environment variable is set to true, the OAuth callback handler skips ownership verification of the OAuth state parameter. This allows an attacker to trick a victim into completing an...

CVE-2026-29785

creationtimestamp| type| source ---|---|--- 2026-03-25 19:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-29785 2026-03-25 21:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhvydsong52r 2026-03-26 21:40:09+00:00| seen|...

CVE-2026-27602

Modoboa contains an OS command injection vulnerability (CWE-like) due to exec_cmd paths using subprocess with shell=True and unsanitized domain/input values. In modoboa/lib/sysutils.py and related sinks (DKIM domain handling, mailbox rename, sa-learn, doveadm, rrdtool, webmail operations), domain...