WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 26.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from a flaw in the order of cleaning operations for the about field in user profiles, which...

CVE-2026-4534

creationtimestamp| type| source ---|---|--- 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4534 2026-03-22 06:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmvrgvgvu2y 2026-03-22 06:42:03+00:00| seen|...

CVE-2026-4445

creationtimestamp| type| source ---|---|--- 2026-03-22 03:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmkkuesyn2t 2026-03-22 03:01:17+00:00| seen| https://bsky.app/profile/potato.software/post/3mhmkkvescb2u 2026-03-24 01:00:00+00:00| seen|...

GHSA-69FQ-XP46-6X23

creationtimestamp| type| source ---|---|--- 2026-03-22 00:39:26+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3mhmcnah4ja2t 2026-03-22 01:01:00+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mhmdttccr22u 2026-03-22 13:18:38+00:00| seen|...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-1393: Cross-Site Request Forgery (CSRF)

The Add Google Social Profiles to Knowledge Graph Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to...

WordPress plugin Add Google Social Profiles to Knowledge Graph Box 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

EUVD-2026-13906

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-33425 Discourse has inferable private group membership or existence via exclude_groups parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

PT-2026-26709

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. Unauthenticated users can determine whether a specific user is...

CVE-2026-33346

creationtimestamp| type| source ---|---|--- 2026-03-19 21:21:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgwnrip2k2x 2026-03-19 21:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgyl6jwsr2y 2026-03-20 16:00:15+00:00| seen|...

PT-2026-26308

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile. An authenticated attacker can inject parts of an XSS payload in their first and last name fields. The payload is executed when the user's full name is rendered. The...

USN-8098-3: Linux kernel vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-31898

creationtimestamp| type| source ---|---|--- 2026-03-18 12:41:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj4o4jp72s 2026-03-18 12:42:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj5oxa7f2u 2026-03-18 12:42:07+00:00| seen|...

DEBIAN-CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-27894

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with...

CVE-2026-3888

creationtimestamp| type| source ---|---|--- 2026-03-17 19:24:31+00:00| seen| https://t.me/ctinow/247297 2026-03-17 20:01:23+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhbrae5mtr62 2026-03-17 20:33:25+00:00| seen|...

USN-8096-4: Linux kernel (Real-time) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...