CVE-2025-33248

creationtimestamp| type| source ---|---|--- 2026-03-24 22:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlasduad2x 2026-03-24 22:06:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtljf7zrq2r 2026-03-24 22:09:34+00:00| seen|...

CVE-2026-24141

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5swrys2m 2026-03-24 22:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlsjgc2l2o...

CVE-2026-24159

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5merbx2t 2026-03-24 22:34:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtn25ai5f2d 2026-03-31 09:40:09+00:00| seen|...

CVE-2025-33247

creationtimestamp| type| source ---|---|--- 2026-03-24 21:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtkw3kxpc2g 2026-03-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaqo4jf27 2026-03-26 00:20:09+00:00| seen|...

CVE-2026-3889

creationtimestamp| type| source ---|---|--- 2026-03-24 21:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtktfglie24 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-4777

CVE-2026-4777 affects SourceCodester Sales and Inventory System 1.0, specifically the POST Parameter Handler’s file view_supplier.php. The vulnerability arises from manipulating the searchtxt argument, enabling SQL injection. The issue can be exploited remotely and, according to the sources, the ...

GHSA-W5PC-M664-R62V A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

Summary PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate correctly enforces the security.allowEvaluate guard, which is disabled by default. Howeve...

EUVD-2026-14962

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands...

CVE-2026-29772

Astro Server Islands vulnerability CVE-2026-29772 affects Astro SSR apps using the Node standalone adapter prior to version 10.0.0. The POST handler buffers the entire request body and parses it as JSON without any size limit, causing JSON.parse() to allocate many V8 objects and produce memory am...

CVE-2026-29772 Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

Astro is a web framework. Prior to version 10.0.0, Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because JSON.parse allocates a V8 heap object for every element in the input, a crafted payload of many small JSON objects achiev...

EUVD-2026-14905

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering tags but fails to recursively remove dangerous event handlers in other HTML tags such as onerro...

CVE-2026-33162

Craft CMS is a content management system CMS. From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:sectionUid permission for either...

WordPress Smart Custom Fields plugin <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure via Relational Post Search vulnerability discovered by darkmode in WordPress Plugin Smart Custom Fields versions = 5.0.6...

CVE-2026-4684

creationtimestamp| type| source ---|---|--- 2026-03-24 16:09:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsxkducel26 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| see...

CVE-2026-29099

creationtimestamp| type| source ---|---|--- 2026-03-24 16:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhswzmyxwk2v...

EUVD-2026-14899

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system...

CVE-2026-33554

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system managemen...

CVE-2026-33554

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system managemen...

CVE-2026-33497

creationtimestamp| type| source ---|---|--- 2026-03-24 14:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhssrvxwwq2p 2026-03-24 23:15:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdyluzh2c 2026-03-25 03:00:08+00:00| seen|...

CVE-2019-25646

creationtimestamp| type| source ---|---|--- 2026-03-24 14:04:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhsqkp4g6u25 2026-03-25 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhw6xkz67u2r...