22700 matches found
CVE-2026-33250
CVE-2026-33250 affects Freeciv21. Versions prior to 3.1.1 crash with a stack overflow when processing specially-crafted packets, enabling remote servers to crash public servers and potentially crash players’ games locally. Mitigation across advisories shows upgrading to newer releases: Freeciv21 ...
CVE-2026-4306
creationtimestamp| type| source ---|---|--- 2026-03-23 23:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr6zmqyb72f 2026-03-23 23:18:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr6zusy542n 2026-03-24 00:54:26+00:00| seen|...
CVE-2026-32276
creationtimestamp| type| source ---|---|--- 2026-03-23 22:30:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4f4hwqo2c 2026-03-23 22:31:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhr4fviqoh2f 2026-03-23 23:34:10+00:00| seen|...
CVE-2026-2412
The CVE-2026-2412 entry documents a SQL Injection vulnerability in the WordPress plugin “Quiz and Survey Master (QSM)” up to version 10.3.5. The root cause is insufficient sanitization of the merged_question parameter: sanitize_text_field() does not block SQL metacharacters, which are directly co...
Security Bulletin: Vulnerabilities in Quarkus affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in Quarkus has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-66560 DESCRIPTION: Quarkus ...
Security Bulletin: Vulnerabilities in Netty affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-67735 DESCRIPTION: Netty is a...
Security Bulletin: Vulnerabilities in wheel affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerability in wheel has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2026-24049 DESCRIPTION: wheel is a...
WordPress MinhNhut Link Gateway plugin <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by san6051 - PWC in WordPress Plugin MinhNhut Link Gateway versions = 3.6.1...
KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack
Checkmarx KICS scanner is the latest victim of a credential-stealing supply chain attack by TeamPCP. Between 12:58–16:50 UTC on March 23, 35 tags were hijacked. Learn how to audit your workflows, identify malicious activity, and secure your GitHub Actions...
Moderate: Red Hat Security Advisory: python3.12 security update
An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
EUVD-2026-14413
Hidden functionality in the /goform/setSysTools endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows remote enablement of a Telnet service. Once enabled, the service exposes a privileged diagnostic management interface over the network, increasing the attack surface...
EUVD-2026-14417
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing administrative endpoints. A remote attacker can induce an authenticated administrator to submit crafted requests that modify device settings, including security-relevant...
CVE-2026-33352
creationtimestamp| type| source ---|---|--- 2026-03-23 14:38:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqbysilin2c 2026-03-23 15:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqdodhrdd2e 2026-03-23 17:00:15+00:00| seen|...
GHSA-3M6G-2423-7CP3 vulnerabilities
Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.3-rails, ruby4.0-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby, ruby3.2-rails...
WordPress WP Configurator Pro plugin <= 3.7.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin WP Configurator Pro versions = 3.7.9...
CVE-2026-4581
creationtimestamp| type| source ---|---|--- 2026-03-23 12:55:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhq4aoamc52n 2026-03-23 13:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq4lc2qmq2z 2026-04-04 07:00:14+00:00| seen|...
CVE-2026-31849 Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrative interfaces. As a result, an attacker can craft malicious web requests that are executed in the context of an...
CVE-2026-32968
Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the commb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383...
