BichitroGan ISP Billing Software 安全漏洞

BichitroGan ISP Billing Software is an internet service provider billing and customer management system developed by BichitroGan Company in Bangladesh. The version 2025.3.20 of BichitroGan ISP Billing Software contains a security vulnerability. This vulnerability arises from improper handling of...

CVE-2026-2305

creationtimestamp| type| source ---|---|--- 2026-04-19 14:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mju6bqr6fc2h...

GHSA-W8J3-QVC3-H56F

creationtimestamp| type| source ---|---|--- 2026-04-19 07:22:56+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjtgake2o22p...

CVE-2026-6056

creationtimestamp| type| source ---|---|--- 2026-04-19 02:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjswnnbdig2k...

Exploit for CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Unauthentica...

CVE-2026-40490

creationtimestamp| type| source ---|---|--- 2026-04-18 05:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqqiz4c7y2f...

CVE-2026-40492

creationtimestamp| type| source ---|---|--- 2026-04-18 05:18:34+00:00| published-proof-of-concept| Telegram/veDSMFN7ecyhltWdKUwpcYAyE-ogEw-qfchv6YBZH7Zn1oc 2026-04-18 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqpx4bamu26 2026-04-18 06:00:28+00:00| seen|...

CVE-2026-40493

creationtimestamp| type| source ---|---|--- 2026-04-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423827633920562 2026-04-18 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqm5bpu762l 2026-04-18 05:18:34+00:00| published-proof-of-concept|...

CVE-2026-40346

creationtimestamp| type| source ---|---|--- 2026-04-18 01:54:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqdh3izpp2f...

CVE-2026-35465

creationtimestamp| type| source ---|---|--- 2026-04-18 01:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcoadc462s 2026-04-18 03:16:44+00:00| published-proof-of-concept| Telegram/uiCSDEnb8aQmWF7FrTZmjJQGi4eEk-7sLrqhzwnkCLApk...

CVE-2026-40582

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:44+00:00| published-proof-of-concept| Telegram/41gIjnqleUG-c7q5H5vmUlb-p3i15u65SeajvrPdO-zEo4 2026-04-18 02:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqeqddwii2k 2026-04-18 09:00:31+00:00| seen|...

CVE-2026-40581

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:44+00:00| published-proof-of-concept| Telegram/41gIjnqleUG-c7q5H5vmUlb-p3i15u65SeajvrPdO-zEo4 2026-04-18 02:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqezbs3wv26...

CVE-2026-40349 Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator by sending isAdmin=true to PUT /settings/users/userId for their own user ID. The endpoint is intended to let a user ed...

PT-2026-33541

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can escalate their own account to administrator by sending isAdmin=true to PUT /settings/users/userId for their own user ID. The endpoint is intended to let a user ed...

CVE-2026-40478

creationtimestamp| type| source ---|---|--- 2026-04-17 23:20:34+00:00| published-proof-of-concept| Telegram/tNtN6ajST1i0hZ4W2szdcVpxF1Em9wIkkVyc-W9Ntpka1A 2026-04-17 23:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjq4jah7bm26 2026-04-26 04:07:08+00:00| seen|...

CVE-2026-33436

creationtimestamp| type| source ---|---|--- 2026-04-17 22:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpzbjotyc22...

CVE-2026-35512

creationtimestamp| type| source ---|---|--- 2026-04-17 22:29:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpxybsgmk26 2026-04-17 23:20:07+00:00| published-proof-of-concept| Telegram/nSRvyMMuDO4LVDIhCRx7gx27JwRYoRyOv-3439P5STagmw...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the operator.write message-tool. An attacker can modify persistent Matrix profile configuration without proper authorization by sending crafted requests throug...

OpenClaw: Matrix profile config persistence was reachable from operator.write message tools

Summary Matrix profile config persistence was reachable from operator.write message tools. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 Impact Gateway operator.write message-tool paths could reach Matrix profile persistence that should have...

GHSA-7JP6-R74R-995Q OpenClaw: Matrix profile config persistence was reachable from operator.write message tools

Summary Matrix profile config persistence was reachable from operator.write message tools. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 Impact Gateway operator.write message-tool paths could reach Matrix profile persistence that should have...