18491 matches found
GHSA-X6M9-GXVR-7JPV
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
GHSA-9CQ8-3V94-434G
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
GHSA-W37C-QQFP-C67F
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
GHSA-9GM9-C8MQ-VQ7M
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...
PT-2026-30335
Name of the Vulnerable Software and Affected Versions AVideo versions 26.0 and prior Description The plugin/API/check.ffmpeg.json.php endpoint allows probing the FFmpeg remote server configuration and retrieving connectivity status without authentication. The sibling endpoints kill.ffmpeg.json.ph...
GHSA-RRVG-CXH4-QHRV
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:37+00:00| published-proof-of-concept| Telegram/CEl2HN4MrzqJMXyxgw87k5eg4RsD4Gdp10Ib2zQOK7Dk...
GHSA-VVWJ-FVWH-4WHX
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:37+00:00| published-proof-of-concept| Telegram/CEl2HN4MrzqJMXyxgw87k5eg4RsD4Gdp10Ib2zQOK7Dk...
GHSA-MGQC-3445-QGHQ
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...
GHSA-5JWG-CR5Q-VJQ2
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...
GHSA-397M-GFHM-PMG2
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...
GHSA-WFMR-9HG8-JH3M
creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...
CVE-2026-35468
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.historystore.historyindex.unwr...
CVE-2026-35468 nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.historystore.historyindex.unwr...
CVE-2026-35468 nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history index
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.historystore.historyindex.unwr...
EUVD-2026-18891
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, the discovery handler accepts a peer-controlled limit during handshake and stores it unchanged. The immediate HandshakeAck path then honors lim...
EUVD-2026-18895
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an elected validator proposer can send an election macro block whose header.interlink does not match the canonical next interlink. Honest...
CVE-2026-34061 nimiq/core-rs-albatross: Macro block proposal interlink bug
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an elected validator proposer can send an election macro block whose header.interlink does not match the canonical next interlink. Honest...
EUVD-2026-18849
OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect URL can obtain both the authorization code and PKCE verifier, defeating PKCE protection and enabling token redemption...