CVE-2026-26514

creationtimestamp| type| source ---|---|--- 2026-03-04 16:20:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaouakeva2h 2026-03-06 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgex62lxo62e...

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

CVE-2026-23811

creationtimestamp| type| source ---|---|--- 2026-03-04 13:30:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgafcqwtof26...

CVE-2026-23601

creationtimestamp| type| source ---|---|--- 2026-03-04 13:30:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgafcqwtof26...

RUSTSEC-2026-0036 `time-sync` was removed from crates.io due to malicious code

The time-sync crate attempted to exfiltrate .env files to a server that was in turn impersonating the legitimate timeapi.io service. This the same attack that we've seen three times in the last few days. The malicious crate had 1 version published on 2026-03-04 approximately 50 minutes before...

CVE-2026-27443

creationtimestamp| type| source ---|---|--- 2026-03-04 10:18:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mga2mnheru2n...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:3463 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration CVE-2026-23097 For more details about the security...

CVE-2025-50192

Chamilo is a learning management system. Prior to version 1.11.30, there is a time-based SQL Injection in found in /main/webservices/registration.soap.php. This issue has been patched in version 1.11.30...

CVE-2026-26266

creationtimestamp| type| source ---|---|--- 2026-03-04 00:09:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6ykjb2kg2n 2026-03-04 08:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg7svur77x2d 2026-03-04 08:17:40+00:00| seen|...

PT-2026-33032

Name of the Vulnerable Software and Affected Versions BC-JAVA versions 1.71 through 1.83 Description A covert timing channel exists in the BC-JAVA core modules, specifically associated with the program files FrodoEngine.Java. A covert timing channel is a method of transferring information from on...

The vulnerability of the msc313_rtc_probe() function in the drivers/rtc/rtc-msc313.c file of the Linux operating system’s Real Time Clock driver allows a hacker to cause a service failure.

The vulnerability of the msc313rtcprobe function in the drivers/rtc/rtc-msc313.c file of the Linux operating system’s Real Time Clock driver is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-22955

Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employerid parameter. Attackers can send POST requests to the register-recruiters endpoint with time-based SQL injection payloads to...

The vulnerability of the mlx5e_ptp_open() function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005731 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy...

RHEL 8 : kernel-rt (RHSA-2026:3463)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3463 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

CVE-2026-23865

creationtimestamp| type| source ---|---|--- 2026-03-03 23:08:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mg6v5ishnk2z 2026-03-06 11:21:13+00:00| seen| https://www.acn.gov.it/portale/w/rilevata-nuova-vulnerabilita-in-freetype 2026-03-28 14:28:56+00:00| seen|...

CVE-2026-28289

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authenticated user with file upload permissions to achieve Remote Code Execution RCE on the server by uploading a maliciou...