CVE-2026-33681

creationtimestamp| type| source ---|---|--- 2026-03-23 12:37:14+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-3hwv-x8g3-9qpr 2026-03-23 20:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhquvwdqp42d 2026-03-24 01:43:11+00:00| seen|...

CVE-2026-1969

creationtimestamp| type| source ---|---|--- 2026-03-23 12:18:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq264g4iw2o...

CVE-2026-4573

creationtimestamp| type| source ---|---|--- 2026-03-23 12:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpzm7jxqb2e...

CVE-2016-20026

creationtimestamp| type| source ---|---|--- 2026-03-23 11:38:11+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhpxw437qy2o...

CVE-2026-22901

creationtimestamp| type| source ---|---|--- 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

OPENSUSE-SU-2026:20410-1 Security update for exiv2

This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder bsc1219870. - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntriesDecoder bsc1219871. - CVE-2024-39695:...

CVE-2026-4602

creationtimestamp| type| source ---|---|--- 2026-03-23 08:36:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpnqwag7l27 2026-03-24 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhri3l3h2r2p 2026-07-01 14:18:42+00:00| seen|...

CVE-2025-6229

creationtimestamp| type| source ---|---|--- 2026-03-23 08:17:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpmofdae52n...

EUVD-2026-14365

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-4574

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-30886

creationtimestamp| type| source ---|---|--- 2026-03-23 05:58:29+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-f35r-v9x5-r8mc 2026-03-23 19:16:25+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30886...

CVE-2026-4574 SourceCodester Simple E-learning System User Profile Update sql injection

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-4574

CVE-2026-4574 affects SourceCodester Simple E-learning System 1.0, specifically the User Profile Update Handler. The vulnerability arises from manipulating the firstName argument, resulting in a SQL injection. It can be exploited remotely and an exploit is public. Metrics indicate MEDIUM severity...

CVE-2026-4574 SourceCodester Simple E-learning System User Profile Update sql injection

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-4574

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

PT-2026-27138

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2024-51222

Technical details about CVE-2024-51222 (affected product, component, impact, or remediation) are not provided in the supplied documents. Monitor for updates.

PT-2026-36257

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description A path traversal issue exists during profile import, which could lead to a denial of service and potential code execution. Recommendations At the moment...

Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks

When substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, it was possible to access files outside of the configured search directories. In addition, when using a source control backend, the profile parameter...

PT-2026-27139

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...