CVE-2025-67259

Affects ClassroomIO v0.1.13. A Broken Access Control vulnerability allows an authenticated low-privilege student to access unauthorized course information by altering intercepted API requests. Specifically, changing a captured POST request to a GET against the /rest/v1/course PostgREST endpoint e...

CVE-2026-42601

creationtimestamp| type| source ---|---|--- 2026-04-23 23:42:49+00:00| published-proof-of-concept| https://github.com/ArchiveBox/ArchiveBox/security/advisories/GHSA-3h23-7824-pj8r 2026-05-09 21:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh637ig372e...

CVE-2026-24303

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:09+00:00| published-proof-of-concept| Telegram/kiTcjsXT1hi2Y3u94e7GhzIuEtNJE-kdjO7sui75MorBPg 2026-04-24 02:01:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk7gm4it4l23 2026-04-25 01:11:11+00:00| seen|...

CVE-2026-33819

creationtimestamp| type| source ---|---|--- 2026-04-23 23:06:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk74ubuczj2c 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE 2026-04-24 05:29:06+00:00| seen|...

CVE-2026-35431

creationtimestamp| type| source ---|---|--- 2026-04-23 23:06:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk74ttkqhg2n 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE 2026-04-28 07:11:26+00:00| seen|...

CVE-2026-4131

creationtimestamp| type| source ---|---|--- 2026-04-23 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk72xprt7a2q...

CVE-2026-41349

creationtimestamp| type| source ---|---|--- 2026-04-23 22:25:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72kw6rkh2r 2026-04-23 22:27:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mstot72n 2026-04-23 23:27:23+00:00| seen|...

CVE-2026-41353

creationtimestamp| type| source ---|---|--- 2026-04-23 22:25:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72koj46b2w 2026-04-23 22:26:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mlk4ff2g 2026-04-23 23:27:23+00:00| seen|...

CVE-2026-41353

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353

OpenClaw vulnerable in versions before 2026.3.22 due to an access control bypass in the allowProfiles feature. The root cause is via persistent profile mutation and runtime profile selection, enabling remote attackers to manipulate browser proxy profiles at runtime to access restricted profiles a...

CVE-2026-4128

creationtimestamp| type| source ---|---|--- 2026-04-23 21:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk6xmhhxy52l...

CVE-2026-6375

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records PNRs without any access controls. Because PNR identifiers follow a predictable pattern, an attacker could systematically enumerate valid records and obtain associated passenger names. This flaw...

CVE-2026-41460

creationtimestamp| type| source ---|---|--- 2026-04-23 19:43:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rhqgrmc2q 2026-04-24 15:21:36+00:00| published-proof-of-concept| Telegram/l8-tUjdZo5KblLOe421TQB8MZuX2H9CaOdWKzaRMJrauLgw 2026-05-31 22:07:08+00:00| seen|...

CVE-2026-40472

creationtimestamp| type| source ---|---|--- 2026-04-23 19:39:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rawsxnu2n 2026-04-24 15:22:14+00:00| seen| Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE...

CVE-2026-40471

creationtimestamp| type| source ---|---|--- 2026-04-23 19:39:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rapfj252t 2026-04-24 15:22:14+00:00| seen| Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE...

CVE-2026-42606

creationtimestamp| type| source ---|---|--- 2026-04-23 19:37:18+00:00| published-proof-of-concept| https://github.com/AzuraCast/AzuraCast/security/advisories/GHSA-gv7r-3mr9-h5x8 2026-05-09 21:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5aco5sj2e 2026-05-09...