CVE-2026-23950

creationtimestamp| type| source ---|---|--- 2026-01-19 21:41:54+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w 2026-01-20 02:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mct2r3skqa24 2026-01-20...

CVE-2026-23840

creationtimestamp| type| source ---|---|--- 2026-01-19 19:42:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfllxkv62w 2026-01-19 19:42:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcsfmapvdc2n 2026-01-19 22:03:07+00:00| seen|...

CVE-2026-23836 HotCRP vulnerable to remote code execution through formulas

HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which allowed users to trigger the execution of arbitrary PHP code. The problem is patched in release version 3.2...

CVE-2026-23836 HotCRP vulnerable to remote code execution through formulas

HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which allowed users to trigger the execution of arbitrary PHP code. The problem is patched in release version 3.2...

CVE-2026-23836 HotCRP vulnerable to remote code execution through formulas

HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which allowed users to trigger the execution of arbitrary PHP code. The problem is patched in release version 3.2...

EUVD-2026-3305

HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized code generation for HotCRP formulas which allowed users to trigger the execution of arbitrary PHP code. The problem is patched in release version 3.2...

CVE-2026-23836

HotCRP (conference review software) is affected by CVE-2026-23836. A flaw introduced in April 2024 in version 3.1 enables inadequately sanitized code generation for HotCRP formulas, allowing the execution of arbitrary PHP code (remote code execution). This issue impacts HotCRP 3.1 and is mitigate...

CVE-2026-23534 FreeRDP has heap-buffer-overflow in clear_decompress_bands_data

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer. A malicious server can trigger a...

CVE-2026-23532

CVE-2026-23532 affects the FreeRDP client prior to version 3.21.0, where a heap buffer overflow can be triggered in the FreeRDP client’s gdi_SurfaceToSurface path due to a mismatch between destination rectangle clamping and the actual copy size. This can lead to a crash (DoS) and potential heap c...

CVE-2024-31583

creationtimestamp| type| source ---|---|--- 2026-01-19 11:35:26+00:00| seen| https://gist.github.com/konard/d776e828509d5f2e3644437ac5400628 2026-01-19 11:37:28+00:00| seen| https://gist.github.com/konard/042845fbf63e049778752df088c0c9e4 2026-01-19 11:37:35+00:00| seen|...

PYSEC-2024-251

creationtimestamp| type| source ---|---|--- 2026-01-19 11:35:26+00:00| seen| https://gist.github.com/konard/d776e828509d5f2e3644437ac5400628 2026-01-19 11:37:28+00:00| seen| https://gist.github.com/konard/042845fbf63e049778752df088c0c9e4 2026-01-19 11:37:35+00:00| seen|...

CVE-2024-31584

creationtimestamp| type| source ---|---|--- 2026-01-19 11:35:26+00:00| seen| https://gist.github.com/konard/d776e828509d5f2e3644437ac5400628 2026-01-19 11:37:28+00:00| seen| https://gist.github.com/konard/042845fbf63e049778752df088c0c9e4 2026-01-19 11:37:35+00:00| seen|...

CVE-2024-5206

creationtimestamp| type| source ---|---|--- 2026-01-19 00:13:20+00:00| seen| https://gist.github.com/konard/65ced3fd74042bf5ba0737f60d57d145 2026-01-19 00:16:42+00:00| seen| https://gist.github.com/konard/ed57bdf6f23e9388249c3e81f52a7d40 2026-01-19 00:16:50+00:00| seen|...

CVE-2020-28975

creationtimestamp| type| source ---|---|--- 2026-01-19 00:13:20+00:00| seen| https://gist.github.com/konard/65ced3fd74042bf5ba0737f60d57d145 2026-01-19 00:16:42+00:00| seen| https://gist.github.com/konard/ed57bdf6f23e9388249c3e81f52a7d40 2026-01-19 00:16:50+00:00| seen|...

PYSEC-2024-110

creationtimestamp| type| source ---|---|--- 2026-01-19 00:13:20+00:00| seen| https://gist.github.com/konard/65ced3fd74042bf5ba0737f60d57d145 2026-01-19 00:16:42+00:00| seen| https://gist.github.com/konard/ed57bdf6f23e9388249c3e81f52a7d40 2026-01-19 00:16:50+00:00| seen|...

PT-2026-3452

Name of the Vulnerable Software and Affected Versions @fastify/express versions prior to 4.0.3 Description A security issue exists in the @fastify/express plugin, which provides Express compatibility for Fastify. The problem occurs when middleware is registered with a specific path prefix...

MiracleLinux 3 : glibc-2.5-49.7.0.1.AXS3 (AXSA:2010-477:06)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-477:06 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make...

Fedora: Security Advisory (FEDORA-2026-21a2a74849)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 3 : nspr-4.9.5-2.AXS3, nss-3.14.3-18.AXS3 (AXSA:2013-664:03)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-664:03 advisory. nss Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

MiracleLinux 3 : cvs-1.11.22-11.AXS3.1 (AXSA:2012-268:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-268:01 advisory. CVS Concurrent Versions System is a version control system that can record the history of your files usually, but not always, source code. CVS only stores the...