SUSE CVE-2026-33623

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a...

SUSE CVE-2026-33638

Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to version 4.2.0, GET /api/allusers is mounted as a public endpoint and returns user records without authentication. This allows remote unauthenticated user enumeration and exposure of user profile metadata. ...

CVE-2019-25651

creationtimestamp| type| source ---|---|--- 2026-03-27 23:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3bkvvnv62t 2026-03-28 01:28:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi3i6myecb22...

CVE-2026-4248

creationtimestamp| type| source ---|---|--- 2026-03-27 23:19:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3ax4le4w2p 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ 2026-03-28 02:24:52+00:00| seen|...

CVE-2026-30637

creationtimestamp| type| source ---|---|--- 2026-03-27 23:16:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3aruluvu27...

CVE-2026-4990

creationtimestamp| type| source ---|---|--- 2026-03-27 22:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi35ofau4g24...

CVE-2026-4985

creationtimestamp| type| source ---|---|--- 2026-03-27 22:16:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi35hgt6pv23...

CVE-2026-33954

creationtimestamp| type| source ---|---|--- 2026-03-27 22:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi353nq2bp2d...

CVE-2026-4974

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:25+00:00| published-proof-of-concept| Telegram/wWPS0byCXjzJleEHKN6yjldptusIbQ1L7WvvuLFtEg9AE-Q 2026-03-27 23:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3cfrfb6l2n 2026-03-30 22:00:14+00:00| seen|...

CVE-2026-31943

creationtimestamp| type| source ---|---|--- 2026-03-27 21:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zaywyuj25 2026-03-27 21:22:34+00:00| seen| Telegram/HCzuKY5MuLPsfoEI5S3ks6iQFEX7xEFL0kHnLhrHZ36Sb0 2026-03-27 22:00:58+00:00| seen|...

CVE-2025-15617

creationtimestamp| type| source ---|---|--- 2026-03-27 19:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2uxim3mn2o 2026-09-03 12:00:05+00:00| seen| Telegram/wjGJNcgiCtazOObm08zBWnjh0cnGBFnktQF1xuBs3F9UCdI 2026-09-04 00:00:48+00:00| published-proof-of-concept|...

CVE-2026-34411

creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2tl7ovon2t...

CVE-2026-34385

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user...

CVE-2026-30575

creationtimestamp| type| source ---|---|--- 2026-03-27 19:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2t4bwmsz23...

CVE-2026-30574

creationtimestamp| type| source ---|---|--- 2026-03-27 19:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2stc4bhr2i...

CVE-2026-34394

creationtimestamp| type| source ---|---|--- 2026-03-27 18:37:45+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-4wwr-7h7c-chqr 2026-03-31 23:20:06+00:00| published-proof-of-concept| Telegram/nmybyhyW9j--U7tziXdh4Y31RLU4faF2Hhhi6Dlcxk1tj2s 2026-04-01...

CVE-2026-34385

CVE-2026-34385 affects Fleet open source device management software. A second‑order SQL injection in Fleet’s Apple MDM profile delivery pipeline prior to 4.81.0 could allow a user with a valid MDM enrollment certificate to exfiltrate or modify the Fleet database contents, including user credentia...

CVE-2026-34385

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user...

CVE-2026-34385 Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user...

CVE-2026-34385 Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user...