CVE-2026-33656

creationtimestamp| type| source ---|---|--- 2026-03-25 12:58:11+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mhv5cynfky2p 2026-03-25 13:24:33+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mhv6s56xcl2j 2026-03-27 06:20:09+00:00| seen|...

CVE-2026-33979

creationtimestamp| type| source ---|---|--- 2026-03-25 09:33:42+00:00| published-proof-of-concept| https://github.com/AhmedAdelFahim/express-xss-sanitizer/security/advisories/GHSA-3843-rr4g-m8jq 2026-03-27 22:19:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35ltqsqv27...

CVE-2026-4716

creationtimestamp| type| source ---|---|--- 2026-03-25 01:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtva2knmm2r 2026-03-25 01:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtvafbhdx2x 2026-03-25 01:17:20+00:00| seen|...

CVE-2026-24158

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtladrmcr27 2026-03-24 22:05:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlgbyilp2d 2026-03-24 22:54:15+00:00| seen|...

CVE-2026-24157

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t 2026-03-24 22:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n 2026-03-31 03:20:09+00:00| seen|...

CVE-2025-33254

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtl73pn6o2z 2026-03-24 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaydznh2t 2026-03-31 04:20:19+00:00| seen|...

CVE-2025-33247

creationtimestamp| type| source ---|---|--- 2026-03-24 21:56:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtkw3kxpc2g 2026-03-24 22:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaqo4jf27 2026-03-26 00:20:09+00:00| seen|...

CVE-2026-33867

creationtimestamp| type| source ---|---|--- 2026-03-24 13:53:11+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-363v-5rh8-23wg 2026-03-27 19:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2sw4s6x62t 2026-03-27 19:15:20+00:00| seen|...

CVE-2019-25628

creationtimestamp| type| source ---|---|--- 2026-03-24 13:05:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhsnb3ljx72y 2026-03-24 13:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhspptsrc42p...

Remote Code Execution (RCE)

tinacms is vulnerable to remote code execution. The vulnerability is due to improper handling of markdown content using the gray-matter package, which allows an attacker to execute arbitrary code by injecting malicious content into processed markdown files such as blog posts...

CVE-2026-4755

creationtimestamp| type| source ---|---|--- 2026-03-24 07:16:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzrjfvsk27 2026-03-24 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116282977621312105 2026-03-24 07:30:30+00:00| seen|...

CVE-2026-4753

creationtimestamp| type| source ---|---|--- 2026-03-24 06:23:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrwsrriex2c 2026-03-24 07:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2osrnei2n...

EUVD-2026-14618

The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...

CVE-2026-4021

creationtimestamp| type| source ---|---|--- 2026-03-24 00:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbw2jt5724 2026-03-24 00:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrchlqftr2e...

CVE-2026-3533

creationtimestamp| type| source ---|---|--- 2026-03-24 00:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbo36xep2p 2026-03-24 00:23:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrcp2nvyn2s...

Unspecified vulnerability in Discourse (CNVD-2026-17481)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability due to an overly broad authorization check on the deleted post index endpoint, which can ...

Discourse Information Disclosure Vulnerability (CNVD-2026-17477)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an information disclosure vulnerability that stems from the /private-posts endpoint not applying post type...

CVE-2026-4066

The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relationalpostssearch function in all versions up to, and including, 5.0.6. This makes it possible for authenticated attackers, with Contributor-level access and abov...

CVE-2025-60947

creationtimestamp| type| source ---|---|--- 2026-03-23 22:44:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr55hi7rl27 2026-03-23 23:19:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr73jy6su2i 2026-03-24 01:32:09+00:00| seen|...

CVE-2026-32300

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr53h7zwd27 2026-03-23 23:04:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr6bxm56l2g 2026-03-24 23:00:14+00:00| seen|...