CVE-2026-33947

creationtimestamp| type| source ---|---|--- 2026-04-14 01:12:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg77wiex52z 2026-06-22 11:20:03+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mourdgqfqt2u...

CVE-2026-40312

creationtimestamp| type| source ---|---|--- 2026-04-14 01:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg6qxn6yc2o 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

Quantum-Safe IPsec in the Banking Industry

The emergence of Cryptographically Relevant Quantum Computers CRQCs presents a critical threat to classical cryptographic systems, particularly widely adopted protocols such as RSA, Diffie-Hellman DH, and Elliptic Curve Cryptography ECC. Given their extensive use in the financial sector, the adve...

School-Management-System 安全漏洞

School-Management-System is a school management system developed by Lahiru Danushka. Version 1.0 of School-Management-System has security vulnerabilities, which stem from improper handling of email POST parameters in the file /studentms/admin/contact-us.php. This could lead to reflection-type...

Chamilo LMS 跨站脚本漏洞

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Versions of Chamilo LMS prior to 2.0.0-RC.3 contained a cross-site scripting vulnerability. This vulnerability...

Schneider Electric PowerChute Serial Shutdown 路径遍历漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown and energy management software from Schneider Electric, France. A path traversal vulnerability exists in Schneider Electric PowerChute Serial Shutdown, which can be exploited by an attacker to cause a web...

CVE-2025-65136

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter...

PT-2026-32681

CVE-2026-38527 A Server-Side Request Forgery SSRF in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying … https://t.co/UnVbPvc3Tv...

WordPress plugin Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-63939

CVE-2025-63939 affects the anirudhkannan Grocery Store Management System 1.0. The vulnerability is caused by improper input handling in /Grocery/search_products_itname.php, allowing SQL injection via the sitem_name POST parameter. The entry carries a CVSS v3.1 base score of 9.8 (CRITICAL) with NE...

PT-2026-32917

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting XSS vulnerability exists in the social post attachment upload functionality, where an authenticated user can upload a malicious HTML file containing JavaScript via the...

Schneider Electric PowerChute Serial Shutdown 资源管理错误漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown and energy management software from Schneider Electric France. Schneider Electric PowerChute Serial Shutdown suffers from a Resource Management Error vulnerability that stems from uncontrolled resource consumption,...

Schneider Electric PowerChute Serial Shutdown 安全漏洞

Schneider Electric PowerChute Serial Shutdown is a UPS management, normal shutdown and energy management software from Schneider Electric France. A security bypass vulnerability exists in Schneider Electric PowerChute Serial Shutdown, which stems from improper output encoding or escaping, and can...

PT-2026-32677

Name of the Vulnerable Software and Affected Versions PowerChute Serial Shutdown affected versions not specified Description An uncontrolled resource consumption issue exists where a Web Admin user can cause a denial of service. This occurs when the system is flooded with specially crafted POST...

CVE-2026-32272

creationtimestamp| type| source ---|---|--- 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4 2026-04-14 02:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgcdnm6ug2o...

CVE-2026-39963

creationtimestamp| type| source ---|---|--- 2026-04-13 22:15:38+00:00| published-proof-of-concept| https://github.com/s9y/Serendipity/security/advisories/GHSA-4m6c-649p-f6gf 2026-04-15 04:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2bnxkza2k...

CVE-2026-41133

creationtimestamp| type| source ---|---|--- 2026-04-13 22:07:51+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-66hx-chf7-3332 2026-04-22 01:19:46+00:00| seen| Telegram/K73t--MeF8g6jG3bb2C-tygRugHSGj3gpQqllzPf61swe44 2026-04-22 02:11:02+00:00| seen|...

EUVD-2026-22041

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters. Attackers can inject scripts through the value, commentbody, articlecontent, description, and message parameters...

CVE-2025-66769

creationtimestamp| type| source ---|---|--- 2026-04-13 21:27:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfsmitrwj2w...

CVE-2026-33901

creationtimestamp| type| source ---|---|--- 2026-04-13 21:26:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfsmc32dz2h 2026-04-13 23:21:07+00:00| seen| Telegram/sslKRMt7XnAICw7zsZDqotnt2tiVrXD0JXK6a6QUxCGOW4 2026-04-18 05:37:08+00:00| seen|...