CVE-2026-32728

creationtimestamp| type| source ---|---|--- 2026-03-19 21:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgvj7xwc425 2026-03-19 21:13:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgw6rdod52h...

EUVD-2026-13124

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

CVE-2026-26931

creationtimestamp| type| source ---|---|--- 2026-03-19 18:04:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhglmdgtvr2n 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q...

CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

CVE-2026-32866

OPEXUS eComplaint and eCASE prior to version 10.2.0.0 are affected by a stored XSS vulnerability in profile name handling. An authenticated user can inject parts of an XSS payload into their first and last name fields, and the payload is executed when the full name is rendered, allowing script ex...

CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

CVE-2026-33354

creationtimestamp| type| source ---|---|--- 2026-03-19 15:10:58+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-4jw9-5hrc-m4j6 2026-03-19 15:10:58+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-4jw9-5hrc-m4j6...

CLSA-2026-1773923672 ImageMagick: Fix of 11 CVEs

CVE-2026-25797: fix PostScript/HTML code injection via unsanitized filenames - CVE-2026-25982: fix heap out-of-bounds read in DICOM colormap decoder - CVE-2026-25968: fix stack buffer overflow in MSL opacity attribute processing - CVE-2026-25986: fix heap buffer overflow write in YUV 4:2:2...

CVE-2025-60237

creationtimestamp| type| source ---|---|--- 2026-03-19 12:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfzfsifze2n 2026-03-19 21:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgvis3wdl2v 2026-03-19 21:13:01+00:00| seen|...

CVE-2025-68836

creationtimestamp| type| source ---|---|--- 2026-03-19 11:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfwvn7y6m24...

CVE-2026-3658

creationtimestamp| type| source ---|---|--- 2026-03-19 11:51:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfwsnk5o424 2026-03-19 20:25:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgtjj33u72d...

CVE-2026-4120

creationtimestamp| type| source ---|---|--- 2026-03-19 08:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfm2hwnva2v...

CVE-2026-27065

creationtimestamp| type| source ---|---|--- 2026-03-19 08:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27065 2026-03-19 09:24:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfoluekqx2s 2026-03-19 12:18:55+00:00| seen|...

CVE-2026-28070

creationtimestamp| type| source ---|---|--- 2026-03-19 07:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfjty5rqv2n...

CVE-2026-27397

creationtimestamp| type| source ---|---|--- 2026-03-19 07:48:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfj72bfnr2k...

CVE-2026-27096

creationtimestamp| type| source ---|---|--- 2026-03-19 06:36:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff6pqune25 2026-03-19 06:43:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhffgtf2kf2d 2026-03-19 06:53:28+00:00| seen|...

EUVD-2026-13057

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This issue affects Profile Builder Pro: from n/a through 3.13.9...

CVE-2026-27413

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This issue affects Profile Builder Pro: from n/a before 3.14.0...

CVE-2026-27413

CVE-2026-27413 is a SQL Injection vulnerability in the WordPress plugin Profile Builder Pro (the Profile Builder Pro component). The issue is described as an improper neutralization of special elements used in SQL commands, allowing Blind SQL Injection. Affected versions are Profile Builder Pro: ...

CVE-2026-27413 WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This issue affects Profile Builder Pro: from n/a before 3.14.0...