CVE-2026-2413

creationtimestamp| type| source ---|---|--- 2026-03-11 04:18:01+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2413 2026-03-11 17:30:18+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2413.yaml...

QuaNTUM: A Modular Quantum Communication Testbed for Scalable Fiber and Satellite Integration

Secure communication is essential for modern society, from financial transactions to critical infrastructure. As classical encryption faces threats from advancing computational power, quantum communication provides a fundamentally secure alternative based on physical laws. We present QuaNTUM...

CVE-2026-28687

A flaw was found in ImageMagick, free and open-source software used for editing and manipulating digital images. A heap use-after-free vulnerability in ImageMagick's MSL Magick Scripting Language decoder allows an attacker to trigger access to freed memory by crafting a malicious MSL file. This c...

FreshRSS 安全漏洞

FreshRSS is an open-source, free, and self-hosted RSS aggregator developed by FreshRSS. Versions of FreshRSS prior to 1.28.0 contained a security vulnerability. This vulnerability stemmed from a flaw in the authentication logic related to the main authentication token, which could allow...

Apache Airflow 安全漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. Prior to Apache Airflow 9.22.0, there were security...

OA-System 安全漏洞

OA-System is an office automation system developed by Miazzy himself. There is a security vulnerability in OA-System, which stems from functions that come from sources outside the scope of trusted control...

CVE-2026-29067

creationtimestamp| type| source ---|---|--- 2026-03-07 15:18:44+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgi4rrcn3b2b 2026-03-07 15:39:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi5xbwnqp2s...

CVE-2026-1074

creationtimestamp| type| source ---|---|--- 2026-03-07 09:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116187072429443864 2026-03-07 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mghhnhxrsx2c 2026-03-07 09:29:42+00:00| seen|...

CVE-2025-8899

creationtimestamp| type| source ---|---|--- 2026-03-07 08:15:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf4ha5rd2c 2026-03-07 08:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghhd3jpwv2u...

CVE-2026-25070

creationtimestamp| type| source ---|---|--- 2026-03-07 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116185302967371403 2026-03-07 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mggoisy2gt22 2026-03-07 03:10:30+00:00| seen|...

CVE-2026-29789

creationtimestamp| type| source ---|---|--- 2026-03-07 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mggjiagyrz22 2026-03-07 00:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116184949853197812 2026-03-07 07:05:14+00:00| seen|...

Zarf's symlink targets in archives are not validated against destination directory

Summary A path traversal vulnerability in archive extraction allows a specifically crafted Zarf package to create symlinks pointing outside the destination directory, enabling arbitrary file read or write on the system processing the package. What users should do Upgrade immediately to version...

CVE-2026-23925

creationtimestamp| type| source ---|---|--- 2026-03-06 12:04:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfbhyyrfi2y 2026-03-06 13:10:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff5gsmiy2q...

CVE-2026-2330

creationtimestamp| type| source ---|---|--- 2026-03-06 08:20:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeux7577l2k 2026-03-06 08:21:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeuy5n4ol2x 2026-03-06 09:49:39+00:00| seen|...

CVE-2026-3613

creationtimestamp| type| source ---|---|--- 2026-03-06 04:30:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgei43gyjr2s 2026-03-06 04:48:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgej4njjwc2x...

CVE-2026-28474

creationtimestamp| type| source ---|---|--- 2026-03-06 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116179994511844506 2026-03-06 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mged2srv672u 2026-03-06 10:55:47+00:00| seen|...

CVE-2026-21536

creationtimestamp| type| source ---|---|--- 2026-03-06 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mge5ztlfhz2h 2026-03-06 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116179640530916616 2026-03-06 01:54:07+00:00| seen|...

RHEL 8 : grafana-pcp (RHSA-2026:3821)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3821 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

CVE-2026-30823

creationtimestamp| type| source ---|---|--- 2026-03-05 21:31:35+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cwc3-p92j-g7qm 2026-03-07 08:07:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghep67nmd2k 2026-03-07...

CVE-2026-21628

creationtimestamp| type| source ---|---|--- 2026-03-05 10:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgclf5gzfu2o 2026-03-05 10:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116176101773626475 2026-03-05 10:30:34+00:00| seen|...