CVE-2026-25417

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Stored XSS.This issue affects ProfileGrid : from n/a through = 5.9.8.1...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-4484

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwmeoazhu27 2026-03-26 03:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwmmwoppr2i 2026-03-26 05:01:21+00:00| seen|...

CVE-2026-34055

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfolx6lc2p 2026-03-26 01:05:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfxipqup2d 2026-03-26 17:20:09+00:00| seen|...

CVE-2026-32539

creationtimestamp| type| source ---|---|--- 2026-03-25 20:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvxahsfom24 2026-03-25 22:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw3nd7hyk25 2026-04-07 23:30:07+00:00| seen|...

USN-8098-7: Linux kernel (Azure) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33656

creationtimestamp| type| source ---|---|--- 2026-03-25 12:58:11+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mhv5cynfky2p 2026-03-25 13:24:33+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mhv6s56xcl2j 2026-03-27 06:20:09+00:00| seen|...

CVE-2026-25417: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Stored XSS.This issue affects ProfileGrid : from n/a through = 5.9.8.1...

CVE-2026-24157

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t 2026-03-24 22:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n 2026-03-31 03:20:09+00:00| seen|...

USN-8121-1: Linux kernel (AWS FIPS) vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33848

creationtimestamp| type| source ---|---|--- 2026-03-24 07:08:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrzdajm642s 2026-03-24 07:38:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2xr7ps22p...

CVE-2026-4021

creationtimestamp| type| source ---|---|--- 2026-03-24 00:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbw2jt5724 2026-03-24 00:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrchlqftr2e...

CVE-2025-60946

creationtimestamp| type| source ---|---|--- 2026-03-23 22:44:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr55apedj2p 2026-03-23 22:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr56ixpyt2d 2026-03-24 01:29:44+00:00| seen|...

CVE-2025-60949

creationtimestamp| type| source ---|---|--- 2026-03-23 22:43:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr52w6h442g 2026-03-23 22:44:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr5525dmv2u 2026-03-25 22:00:15+00:00| seen|...

WordPress Add Google Social Profiles to Knowledge Graph Box plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Add Google Social Profiles to Knowledge Graph Box versions = 1.0...

WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform building system written in PHP, developed by the WWBN team. Versions of WWBN AVideo prior to 26.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from a flaw in the order of cleaning operations for the about field in user profiles, which...

CVE-2026-4534

creationtimestamp| type| source ---|---|--- 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4534 2026-03-22 06:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmvrgvgvu2y 2026-03-22 06:42:03+00:00| seen|...

CVE-2026-4445

creationtimestamp| type| source ---|---|--- 2026-03-22 03:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmkkuesyn2t 2026-03-22 03:01:17+00:00| seen| https://bsky.app/profile/potato.software/post/3mhmkkvescb2u 2026-03-24 01:00:00+00:00| seen|...

GHSA-69FQ-XP46-6X23

creationtimestamp| type| source ---|---|--- 2026-03-22 00:39:26+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3mhmcnah4ja2t 2026-03-22 01:01:00+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mhmdttccr22u 2026-03-22 13:18:38+00:00| seen|...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...