PT-2026-36154

Name of the Vulnerable Software and Affected Versions gnutls affected versions not specified Description A logic error exists in how the software processes multi-record Online Certificate Status Protocol OCSP responses—a protocol used to check the revocation status of digital certificates. A remo...

CVE-2023-31364

creationtimestamp| type| source ---|---|--- 2026-02-24 17:04:49+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116126691392778847 2026-02-26 22:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsbrobzjc2y...

CVE-2026-27202

creationtimestamp| type| source ---|---|--- 2026-02-24 16:07:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmkessg5i2s 2026-02-24 16:07:36+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116126464556997178...

CVE-2026-3062

creationtimestamp| type| source ---|---|--- 2026-02-24 05:55:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116124057999218618 2026-02-24 14:40:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfmfim3u7i2w 2026-02-25 03:28:43+00:00| seen|...

Binardat 10G08-0800GSM Cross-site Request Forgery Vulnerability

Binardat 10G08-0800GSM is a high-performance switch from the Chinese company Binardat. The Binardat 10G08-0800GSM Network Switch V300SP10260209 and earlier versions have a cross-site request forgeing vulnerability. This vulnerability stems from the lack of CSRF protection for status change...

CVE-2026-25648

Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated users can execute arbitrary JavaScript in the context of other users' browsers by uploading malicious SVG files as device images. The application accepts SVG file uploads without...

CVE-2025-69700

creationtimestamp| type| source ---|---|--- 2026-02-23 15:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116120609814814144...

CVE-2026-27579

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

CVE-2026-2912

creationtimestamp| type| source ---|---|--- 2026-02-23 03:36:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfipww7lon2m 2026-02-24 07:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfllsazlhe2i...

CVE-2026-2981

creationtimestamp| type| source ---|---|--- 2026-02-22 16:34:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116115246009145749 2026-02-23 10:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfjfheyra42s 2026-02-23 10:30:30+00:00| seen|...

CVE-2026-25591

creationtimestamp| type| source ---|---|--- 2026-02-22 15:59:14+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-w6x6-9fp7-fqm4 2026-02-24 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mflsjc6zzn2u 2026-02-24...

CVE-2026-2962

creationtimestamp| type| source ---|---|--- 2026-02-22 07:48:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116113178061885299 2026-02-23 01:18:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfiiasgw2n2u 2026-02-23 01:30:33+00:00| seen|...

CVE-2026-2049

creationtimestamp| type| source ---|---|--- 2026-02-21 16:11:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfez7paodc26 2026-04-20 20:55:50+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjxe4z4yvc2h 2026-04-20 21:00:46+00:00| seen|...

CVE-2026-27579

CollabPlatform is affected by a CORS misconfiguration in the Appwrite component that allows arbitrary origins to make credentialed requests. This enables an attacker-controlled domain to issue authenticated cross-origin requests and read sensitive user data (emails, account identifiers, MFA statu...

CVE-2026-27579 CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

GHSA-Q5FH-2HC8-F6RQ

creationtimestamp| type| source ---|---|--- 2026-02-21 09:40:40+00:00| seen| https://gist.github.com/alon710/d7954c7332e01cf40fa1ed726cd8c207...

CVE-2026-27470

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

CVE-2026-27452

creationtimestamp| type| source ---|---|--- 2026-02-21 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116107446506707835 2026-02-21 07:30:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfe43sfnnj2p...

CVE-2026-2929

creationtimestamp| type| source ---|---|--- 2026-02-21 05:17:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116106923547563735 2026-02-22 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116112754479386463 2026-02-22 06:00:32+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-27470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a...