MINI-J244-4WVF-Q834

Bulletin has no description...

MINI-F2VW-M274-G65X

Bulletin has no description...

CVE-2026-31886

creationtimestamp| type| source ---|---|--- 2026-03-13 07:11:24+00:00| published-proof-of-concept| https://github.com/dagucloud/dagu/security/advisories/GHSA-m4q3-457p-hh2x 2026-03-14 03:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116225292815973119 2026-03-18 16:00:14+00:00...

CVE-2025-13726

creationtimestamp| type| source ---|---|--- 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0292/...

CVE-2025-40130

creationtimestamp| type| source ---|---|--- 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0288/...

WordPress Timetics plugin < 1.0.52 - Unauthenticated Payment/Booking Status Update vulnerability

Unauthenticated Payment/Booking Status Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Timetics versions 1.0.52...

CVE-2026-3909

creationtimestamp| type| source ---|---|--- 2026-03-12 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvixkqqrb2o 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0286/ 2026-03-13 01:52:18+00:00| seen|...

CVE-2026-32308

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with securityLevel: "loose" and injects the SVG output via innerHTML. This configuration explicitly allows interactive event bindings in Mermaid diagrams,...

CVE-2026-32308

OneUptime prior to version 10.0.23 is affected by a Stored XSS in the Markdown viewer’s Mermaid diagram rendering. The renderer uses securityLevel: "loose" and injects Mermaid SVG output via innerHTML, allowing interactive bindings and enabling XSS via Mermaid’s click directive to execute arbitra...

CVE-2026-4043

creationtimestamp| type| source ---|---|--- 2026-03-12 17:58:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguy2qg4wg27 2026-03-13 04:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116219892991017834 2026-03-28 06:33:10+00:00| seen|...

CVE-2019-25524

creationtimestamp| type| source ---|---|--- 2026-03-12 17:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguw5qjbgv2e 2026-03-23 16:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhqis2y5ag2s...

vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

EUVD-2026-11665

Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page...

GHSA-PF93-J98V-25PV

creationtimestamp| type| source ---|---|--- 2026-03-12 14:40:06+00:00| seen| https://gist.github.com/alon710/ab92af6bf1518fd7ebffd80c72fb5bb0...

CVE-2025-12555

creationtimestamp| type| source ---|---|--- 2026-03-12 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgull4qogo2n 2026-03-12 16:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260313...

CVE-2025-12576

creationtimestamp| type| source ---|---|--- 2026-03-12 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgull4qogo2n 2026-03-12 16:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260313...

vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

GHSA-VRQC-59MW-QQG7

creationtimestamp| type| source ---|---|--- 2026-03-12 11:40:06+00:00| seen| https://gist.github.com/alon710/ac739fc815a71a1bbc17c69f0d2579f2...

GHSA-RHCG-3H8R-V6VP

creationtimestamp| type| source ---|---|--- 2026-03-12 11:10:06+00:00| seen| https://gist.github.com/alon710/795c8bcaebe4db185c8f673cfc6fa748...

EUVD-2025-208611

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...