CVE-2026-3548

Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string, and a stack-based overflow for sufficiently sized CRL numbers. With appropriately crafted CRLs,...

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the save.json.php file when user-supplied thumbnail URLs are fetched without proper validation. An attacker can access internal...

CVE-2019-25482

creationtimestamp| type| source ---|---|--- 2026-03-19 09:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhfn7wyonv2q 2026-03-19 09:05:52+00:00| seen| https://bsky.app/profile/potato.software/post/3mhfnk2rzrz2u...

CVE-2026-27067

creationtimestamp| type| source ---|---|--- 2026-03-19 08:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27067 2026-03-19 09:27:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfoqpykwv2f 2026-03-19 09:30:34+00:00| seen|...

CVE-2026-25445

creationtimestamp| type| source ---|---|--- 2026-03-19 08:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-25445 2026-03-19 09:23:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfojmvq5n2s 2026-03-19 09:24:39+00:00| seen|...

cve-exploit-engine

cve-exploit-engine An automated CVE monitoring and exploit wo...

CVE-2026-27413

creationtimestamp| type| source ---|---|--- 2026-03-19 06:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116254430139875917 2026-03-19 06:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhfeu7ojg42m 2026-03-19 06:36:27+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-3548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap- based buffer overflow could occur when improperly storin...

CVE-2026-31970

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP BGZF files. In the GZI loading function, bgzfindexloadhfile, it was possible to trigger an integer overflow, leading to an under- or zero-sized buffer being allocated to stor...

CVE-2026-31970 HTSlib BGZF index file reader has a heap buffer overflow

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP BGZF files. In the GZI loading function, bgzfindexloadhfile, it was possible to trigger an integer overflow, leading to an under- or zero-sized buffer being allocated to stor...

CVE-2026-27135

creationtimestamp| type| source ---|---|--- 2026-03-18 18:42:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe5bdyig32u 2026-03-18 18:48:30+00:00| seen| https://bsky.app/profile/potato.software/post/3mhe5my3bp22q 2026-03-24 05:40:09+00:00| seen|...

CVE-2026-33293

creationtimestamp| type| source ---|---|--- 2026-03-18 17:16:48+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-xmjm-86qv-g226 2026-03-22 16:17:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33293 2026-03-22...

CVE-2026-33292

creationtimestamp| type| source ---|---|--- 2026-03-18 17:12:42+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pw4v-x838-w5pg 2026-03-22 16:17:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33292 2026-03-22...

CVE-2026-33211

creationtimestamp| type| source ---|---|--- 2026-03-18 09:11:27+00:00| published-proof-of-concept| https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c 2026-03-24 00:23:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrcpb3xsj2l 2026-03-24...

CVE-2026-32606

creationtimestamp| type| source ---|---|--- 2026-03-18 06:55:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhcvsucvmt2h 2026-03-18 06:59:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhcvz6whps2c...

CVE-2026-33204

creationtimestamp| type| source ---|---|--- 2026-03-18 06:55:10+00:00| published-proof-of-concept| https://github.com/kelvinmo/simplejwt/security/advisories/GHSA-xw36-67f8-339x 2026-03-20 23:44:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjp3gkqfz26 2026-03-20...

CVE-2026-30884

creationtimestamp| type| source ---|---|--- 2026-03-18 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116248649929823937 2026-03-18 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhcspot2qw2n 2026-03-18 12:42:18+00:00| seen|...

PT-2026-26203

Summary The Allure report generator is vulnerable to an arbitrary file read via path traversal when processing test results. An attacker can craft a malicious result file -result.json, -container.json, or .plist that points an attachment source to a sensitive file on the host system. During repor...

The vulnerability of Mozilla Firefox’s CSS analysis and calculation components allows attackers to bypass existing security mechanisms safely.

The vulnerability of Mozilla Firefox’s CSS analysis and calculation components is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms remotely...

CVE-2026-3888

creationtimestamp| type| source ---|---|--- 2026-03-17 19:24:31+00:00| seen| https://t.me/ctinow/247297 2026-03-17 20:01:23+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhbrae5mtr62 2026-03-17 20:33:25+00:00| seen|...