CVE-2026-33418

creationtimestamp| type| source ---|---|--- 2026-03-24 23:15:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtpdlkhlx2c 2026-03-25 11:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhuyxhheum27...

CVE-2026-27784

creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtonc4ptz27 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...

CVE-2026-32647

creationtimestamp| type| source ---|---|--- 2026-03-24 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtojbwq6o2m 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 13:27:30+00:00| seen|...

CVE-2026-33554

creationtimestamp| type| source ---|---|--- 2026-03-24 22:53:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto4lf4kc2c 2026-05-09 09:25:09+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mlfwdyyhaa22...

CVE-2026-4775

creationtimestamp| type| source ---|---|--- 2026-03-24 22:53:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto45lnmg2m 2026-03-25 03:00:12+00:00| seen| https://access.redhat.com/security/cve/CVE-2026-4775 2026-04-22 22:14:15+00:00| seen|...

CVE-2026-3912

creationtimestamp| type| source ---|---|--- 2026-03-24 22:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnm24gdn2g...

CVE-2026-29839

creationtimestamp| type| source ---|---|--- 2026-03-24 22:20:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtmauqcoz27...

CVE-2025-33248

creationtimestamp| type| source ---|---|--- 2026-03-24 22:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlasduad2x 2026-03-24 22:06:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtljf7zrq2r 2026-03-24 22:09:34+00:00| seen|...

CVE-2026-24141

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5swrys2m 2026-03-24 22:12:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlsjgc2l2o...

CVE-2026-24159

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5merbx2t 2026-03-24 22:34:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtn25ai5f2d 2026-03-31 09:40:09+00:00| seen|...

CVE-2025-33247

creationtimestamp| type| source ---|---|--- 2026-03-24 21:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtkw3kxpc2g 2026-03-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaqo4jf27 2026-03-26 00:20:09+00:00| seen|...

CVE-2026-3889

creationtimestamp| type| source ---|---|--- 2026-03-24 21:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtktfglie24 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325...

CVE-2026-4777

CVE-2026-4777 affects SourceCodester Sales and Inventory System 1.0, specifically the POST Parameter Handler’s file view_supplier.php. The vulnerability arises from manipulating the searchtxt argument, enabling SQL injection. The issue can be exploited remotely and, according to the sources, the ...

GHSA-W5PC-M664-R62V A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

Summary PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate correctly enforces the security.allowEvaluate guard, which is disabled by default. Howeve...

EUVD-2026-14962

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands...

CVE-2026-29772

Astro Server Islands vulnerability CVE-2026-29772 affects Astro SSR apps using the Node standalone adapter prior to version 10.0.0. The POST handler buffers the entire request body and parses it as JSON without any size limit, causing JSON.parse() to allocate many V8 objects and produce memory am...

CVE-2026-29772 Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

Astro is a web framework. Prior to version 10.0.0, Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because JSON.parse allocates a V8 heap object for every element in the input, a crafted payload of many small JSON objects achiev...

EUVD-2026-14905

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering tags but fails to recursively remove dangerous event handlers in other HTML tags such as onerro...

CVE-2026-33162

Craft CMS is a content management system CMS. From version 5.3.0 to before version 5.9.14, an authenticated control panel user with only accessCp can move entries across sections via POST /actions/entries/move-to-section, even when they do not have saveEntries:sectionUid permission for either...

WordPress Smart Custom Fields plugin <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure via Relational Post Search vulnerability discovered by darkmode in WordPress Plugin Smart Custom Fields versions = 5.0.6...