CVE-2026-33486

creationtimestamp| type| source ---|---|--- 2026-03-22 11:18:48+00:00| published-proof-of-concept| https://github.com/roadiz/core-bundle-dev-app/security/advisories/GHSA-rc55-58f4-687g...

CVE-2026-33621

creationtimestamp| type| source ---|---|--- 2026-03-22 00:52:07+00:00| published-proof-of-concept| https://github.com/pinchtab/pinchtab/security/advisories/GHSA-j65m-hv65-r264...

CVE-2026-33622

creationtimestamp| type| source ---|---|--- 2026-03-22 00:47:51+00:00| published-proof-of-concept| https://github.com/pinchtab/pinchtab/security/advisories/GHSA-w5pc-m664-r62v 2026-03-31 17:24:25+00:00| published-proof-of-concept| Telegram/WxHgPFElWYDoFBGl3K0BVKfspuGbiR8geCdPJnxqtoWdxxM...

CVE-2026-33620

creationtimestamp| type| source ---|---|--- 2026-03-22 00:44:56+00:00| published-proof-of-concept| https://github.com/pinchtab/pinchtab/security/advisories/GHSA-mrqc-3276-74f8...

CVE-2026-33619

creationtimestamp| type| source ---|---|--- 2026-03-22 00:44:34+00:00| published-proof-of-concept| https://github.com/pinchtab/pinchtab/security/advisories/GHSA-xqq2-4j46-vwp7...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 - MCPJam insp...

CVE-2026-33545

creationtimestamp| type| source ---|---|--- 2026-03-21 21:50:45+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-hqjr-43r5-9q58 2026-03-21 21:50:45+00:00| published-proof-of-concept|...

Exploit for OS Command Injection in Arcane

CVE-2026-23520 A proof‑of‑concept exploit demonstrat...

webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

If a certificate had more than one distributionPoint, then only the first distributionPoint would be considered against each CRL's IssuingDistributionPoint distributionPoint, and then the certificate's subsequent distributionPoints would be ignored. The impact was that correct provided CRLs would...

CVE-2026-33179 libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...

CVE-2026-33490

creationtimestamp| type| source ---|---|--- 2026-03-20 17:34:15+00:00| published-proof-of-concept| https://github.com/h3js/h3/security/advisories/GHSA-2j6q-whv2-gh6w...

CVE-2026-29794

creationtimestamp| type| source ---|---|--- 2026-03-20 13:51:19+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m547-hp4w-j6jx...

CVE-2026-33315

creationtimestamp| type| source ---|---|--- 2026-03-20 13:49:29+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-47cr-f226-r4pq...

Exploit for CVE-2026-21992

CVE-2...

Exploit for CVE-2026-3888

CVE-2026-3888-P...

Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)

Scriban is vulnerable to an uncontrolled process crash resulting in a Denial of Service. Because the recursive-descent parser does not enforce a default limit on expression depth, an attacker who controls template input can craft a heavily nested template that triggers a StackOverflowException. I...

CVE-2026-33314

creationtimestamp| type| source ---|---|--- 2026-03-19 17:55:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q485-cg9q-xq2r...

CVE-2026-32889

creationtimestamp| type| source ---|---|--- 2026-03-19 16:10:20+00:00| published-proof-of-concept| https://github.com/tinytag/tinytag/security/advisories/GHSA-f4rq-2259-hv29...

📄 Casdoor 2.359.0 Cross Site Request Forgery

Casdoor version 2.359.0 suffers from a cross site request forgery vulnerability. This is an older vulnerability originally discovered in 2023 that they still have not addressed in later versions. Exploit Title: Casdoor 2.359.0 2026-03-18 - Cross-Site Request Forgery CSRF Application: Casdoor...

GHSA-479M-364C-43VC validateSignature Loop Variable Capture Signature Bypass in goxmldsig

Details The validateSignature function in validate.go goes through the references in the SignedInfo block to find one that matches the signed element's ID. In Go versions before 1.22, or when go.mod uses an older version, there is a loop variable capture issue. The code takes the address of the...