CVE-2019-25513 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection via datagetir.php

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. Attackers can send GET requests to datagetir.php with malicious 'q' values using time-based blind...

CVE-2019-25473 Clinic Pro SQL Injection via monthly_expense_overview month Parameter

Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthlyexpenseoverview endpoint with crafted month values using boolean-based blind,...

CVE-2019-25473 Clinic Pro SQL Injection via monthly_expense_overview month Parameter

Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthlyexpenseoverview endpoint with crafted month values using boolean-based blind,...

Exploit for CVE-2026-3222

WP Maps Exploit - Time-Based Blind SQL Injection CVE-2026-32...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the skills download installer. An attacker can cause files to be written outside the intended directory by rebinding the validated...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the system.run approval flow. An attacker can execute unauthorized or modified scripts by obtaining approval for a script execution...

CVE-2026-20435

creationtimestamp| type| source ---|---|--- 2026-03-12 14:15:45+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3mgulld3kmex2 2026-03-12 18:59:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mgv3h672yq2k 2026-03-12 22:24:29+00:00| seen|...

CVE-2025-13690

creationtimestamp| type| source ---|---|--- 2026-03-12 14:15:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgull4qogo2n 2026-03-12 16:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260313...

CVE-2026-21666

creationtimestamp| type| source ---|---|--- 2026-03-12 14:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgulc3hpkk2q 2026-03-12 15:57:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguratg65t24 2026-03-12 15:57:05+00:00| seen|...

GHSA-VRQC-59MW-QQG7

creationtimestamp| type| source ---|---|--- 2026-03-12 11:40:06+00:00| seen| https://gist.github.com/alon710/ac739fc815a71a1bbc17c69f0d2579f2...

New PixRevolution Malware Steals Brazil’s PIX Transfers in Real Time

Researchers have discovered PixRevolution, a new Android banking trojan targeting Brazil’s PIX system. Unlike automated scams, this malware uses live operators to watch your screen and divert funds instantly...

GHSA-MMF8-487Q-P45M

creationtimestamp| type| source ---|---|--- 2026-03-12 10:40:06+00:00| seen| https://gist.github.com/alon710/11a61b6d10f7ad9ce72bb2f275b7afb0...

Microsoft Authenticator could leak login codes—update your app now

A vulnerability in Microsoft Authenticator for both iOS and Android CVE-2026-26123 could leak your one-time sign-in codes or authentication deep links to a malicious app on the same device. Deep links are predefined URIs Uniform Resource Identifiers that allow direct access to an activity in a we...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 140.8 MFSA 2026-17 bsc1258568: CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component CVE-2026-2758: Use-after-free in the JavaScript: GC component CVE-2026-2759: Incorrect boundary...

CVE-2026-32308

creationtimestamp| type| source ---|---|--- 2026-03-12 08:27:37+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-wvh5-6vjm-23qh 2026-03-12 22:35:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvhjztzdd2d 2026-03-18 06:00:14+00:0...

firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the WebRTC: Audio/Video component...

CVE-2026-4015

creationtimestamp| type| source ---|---|--- 2026-03-12 08:15:58+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4015 2026-03-12 12:42:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgugejim622n...

CVE-2026-3981

creationtimestamp| type| source ---|---|--- 2026-03-12 04:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3981 2026-03-12 08:52:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgtzjdu72m2o...

CVE-2026-3657

The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the stickymenucontactleadform AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as SQL column identifiers in $wpdb-insert. While...

CVE-2026-3657: Improper Neutralization of Special Elements used in an SQL Command

The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the stickymenucontactleadform AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as SQL column identifiers in $wpdb-insert. While...