CVE-2026-32972

creationtimestamp| type| source ---|---|--- 2026-03-29 14:00:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7cnaygo22n 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U 2026-03-29 15:20:09+00:00| seen|...

CVE-2026-5007

A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component addgitrepository/addtextfile. The manipulation leads to os command injection. The attack needs to be performed locally. The exploit is publicly...

CVE-2026-33182

creationtimestamp| type| source ---|---|--- 2026-03-26 03:36:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwogg44gw2z 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo...

CVE-2026-20637

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:12+00:00| seen| https://support.apple.com/en-us/126795 2026-03-26 03:00:13+00:00| seen| https://support.apple.com/en-us/126796 2026-04-22 21:00:04+00:00| published-proof-of-concept| Telegram/vKt1e4azT5T7C0rLcqmSzR1-eYk4psQyeIQOy05R--Qw2...

CVE-2026-4595

creationtimestamp| type| source ---|---|--- 2026-03-23 21:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqxk3yyb22i...

CVE-2026-23020

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-71067

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-10 18:00:00+00:00| seen|...

CVE-2026-23095

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-03 15:21:53+00:00| seen| Telegram/DMegkauZxtXBOpvq8xf0b2BrJ08PXfxCnIgpyWhRpRk9x4 2026-04-07 18:00:00+00:00| seen|...

CVE-2026-32729

creationtimestamp| type| source ---|---|--- 2026-03-18 03:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcincpdlf2w 2026-04-02 05:33:20+00:00| seen| https://bsky.app/profile/secqube.com/post/3miii6vrb6y2q...

CVE-2026-28430

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-28430 2026-03-17 00:00:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116241573279155444 2026-03-18 22:14:51+00:00| seen|...

CVE-2026-31873

creationtimestamp| type| source ---|---|--- 2026-03-12 00:10:42+00:00| published-proof-of-concept| https://github.com/unjs/unhead/security/advisories/GHSA-5339-hvwr-7582 2026-03-12 19:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv5ub6kvb2n...

EUVD-2026-9938

A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function adddatasegment of the file src/ettercap/utils/etterfilter/efoutput.c of the component etterfilter. The manipulation leads to out-of-bounds read. Local access is required to approach this...

UBUNTU-CVE-2026-3388

A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the file squirrel/sqcompiler.cpp. Performing a manipulation results in uncontrolled recursion. The attack needs to be approached locally. The exploit has been made public and could...

IBM: SQL Injection vulnerability found on ibm.com endpoint

A SQL injection vulnerability was found on an ibm.com endpoint. The vulnerability was reported to IBM, analyzed, and remediated...

Roblox gives predators “powerful tools” to target children, says LA County

Los Angeles County has sued online gaming company Roblox, adding to a series of suits that accuse the virtual worlds platform of misleading parents into thinking it's safe while leaving children exposed to predators and sexually explicit content. The February 19 filing makes LA County the first...

WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Tablesome versions = 1.2.3...

WordPress iXML - Google XML sitemap generator plugin <= 0.6 - Reflected Cross-Site Scripting via 'iXML_email' Parameter vulnerability

WordPress iXML - Google XML sitemap generator plugin = 0.6 - Reflected Cross-Site Scripting via 'iXMLemail' Parameter vulnerability discovered by johska in WordPress Plugin iXML versions = 0.6...

CVE-2026-2997

creationtimestamp| type| source ---|---|--- 2026-02-23 01:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10721-276b6-2.html...

`rpc-check` was removed from crates.io for malicious code

It was attempting to steal credentials from the POLYMARKETPRIVATEKEY environment variable. The malicious crate had 3 versions published on 2026-02-15 and had been downloaded only 155 times. There were no crates depending on this crate on crates.io. Thanks to Sisong Li for finding and reporting th...

CVE-2025-33252

creationtimestamp| type| source ---|---|--- 2026-02-18 14:18:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5bhtpgd72s 2026-02-18 14:18:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5bio2fvx2s...