23420 matches found
CVE-2026-32064
creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk22lcakl2n 2026-03-21 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlwg2k2gs2s 2026-03-22 03:00:05+00:00| seen|...
CVE-2026-32049
creationtimestamp| type| source ---|---|--- 2026-03-21 02:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjyy2flk42y 2026-03-21 22:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrziedd2c 2026-03-22 03:00:05+00:00| seen|...
CVE-2026-4508
creationtimestamp| type| source ---|---|--- 2026-03-21 00:48:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjsoze7pk2u...
CVE-2026-33411
creationtimestamp| type| source ---|---|--- 2026-03-21 00:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjs54jw7527...
CVE-2026-33422
creationtimestamp| type| source ---|---|--- 2026-03-21 00:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjq75xxiy2e...
PT-2026-26947
Name of the Vulnerable Software and Affected Versions WordPress Import and export users and customers plugin versions up to and including 1.29.7 Description The Import and export users and customers plugin for WordPress is susceptible to privilege escalation. This occurs because the save extra us...
CVE-2026-33291
creationtimestamp| type| source ---|---|--- 2026-03-20 23:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjphamxxp2e...
CVE-2026-33180
creationtimestamp| type| source ---|---|--- 2026-03-20 23:43:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjozj5loo2u...
CVE-2026-33243
creationtimestamp| type| source ---|---|--- 2026-03-20 23:18:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnnyvtud2s 2026-03-21 00:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjqtuti2t2e 2026-03-25 20:00:15+00:00| seen|...
CVE-2026-32940
creationtimestamp| type| source ---|---|--- 2026-03-20 23:15:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnhynt6e2u 2026-03-29 16:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi7lllxu6d2f 2026-03-29 16:40:10+00:00| seen|...
CVE-2026-33037
creationtimestamp| type| source ---|---|--- 2026-03-20 23:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmopgk4k2c 2026-03-20 23:04:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmu4qtlm2t 2026-03-23 23:40:09+00:00| seen|...
CVE-2026-4270
creationtimestamp| type| source ---|---|--- 2026-03-20 21:06:27+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mhjgbipipg2i 2026-03-25 16:08:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mhvhxk4vtq2r...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the downloadprofilepicture function in the /profilepictures/foldername/filename endpoint, where the foldername and filename parameters are not properly filtered. An attacker can access sensitive files outside the...
GHSA-PH9W-R52H-28P7 langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Vulnerability Path Traversal in GET /api/v1/files/profilepictures/foldername/filename The downloadprofilepicture function in src/backend/base/langflow/api/v1/files.py constructed file paths by directly concatenating the user-supplied foldername and filename path parameters without sanitization or...
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Vulnerability Path Traversal in GET /api/v1/files/profilepictures/foldername/filename The downloadprofilepicture function in src/backend/base/langflow/api/v1/files.py constructed file paths by directly concatenating the user-supplied foldername and filename path parameters without sanitization or...
CVE-2026-4519
creationtimestamp| type| source ---|---|--- 2026-03-20 19:45:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhjbqalnii2b 2026-03-23 14:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3mulg524 2026-03-27 15:15:28+00:00| seen|...
CVE-2026-4226
creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...
CVE-2026-4491
creationtimestamp| type| source ---|---|--- 2026-03-20 18:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6x6khj72e...
CVE-2026-4487
creationtimestamp| type| source ---|---|--- 2026-03-20 18:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6oa3qtt2u 2026-03-20 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjfxcngsv2u 2026-03-20 21:01:22+00:00| seen|...