CVE-2026-30526

CVE-2026-30526 affects SourceCodester Zoo Management System v1.0. The vulnerability is located on the login page in the msg parameter, where user-supplied content is echoed back without proper HTML encoding/sanitization, enabling a reflected XSS via a crafted URL. The connected documents confirm ...

CVE-2026-5180

creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:33+00:00| published-proof-of-concept| Telegram/1iWaApiUM0jOADSkCxbAhXY3iS1qKmB0s9RsJgnPCTY34SA 2026-03-31 07:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midoe6pofu2o...

CVE-2026-4996

creationtimestamp| type| source ---|---|--- 2026-03-28 13:15:28+00:00| published-proof-of-concept| Telegram/br59VXTdsrXIjQrxmwmULmHR5vTzBCK926-05m5zFA5U4A 2026-03-28 15:19:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4wmiajg725...

CVE-2026-33954 LinkAce discloses private notesto unauthorized authenticated users via the web link detail page

LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated user via the web interface. The API appears to correctly enforce note visibility, but the web link detail page renders...

CVE-2026-30567

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewproduct.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

globaleaks-whistleblowing-software 输入验证错误漏洞

globaleaks-whistleblowing-software is an open-source anonymous whistleblowing platform developed by GLOBALEAKS. Versions of globaleaks-whistleblowing-software prior to version 5.0.89 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of...

CVE-2026-33743

creationtimestamp| type| source ---|---|--- 2026-03-26 22:08:22+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-vg76-xmhg-j5x3 2026-03-27 00:11:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhytg7w7d32z...

CVE-2026-24993

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-04-09 03:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizukzu6di2t...

CVE-2026-3973

creationtimestamp| type| source ---|---|--- 2026-03-26 10:34:08+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhxfqdgode2z 2026-04-03 01:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikjfjbp4q2v...

CVE-2026-1561

creationtimestamp| type| source ---|---|--- 2026-03-24 15:30:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsvdoje7e2m 2026-03-26 00:14:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwd4t5c3w2i...

CVE-2026-32015

creationtimestamp| type| source ---|---|--- 2026-03-24 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhs7klyo6s2b 2026-03-29 02:00:05+00:00| seen| https://t.me/GithubRedTeam/77718...

CVE-2026-27625

creationtimestamp| type| source ---|---|--- 2026-03-20 10:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhidtnalex2n 2026-03-20 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjjd2f64525 2026-03-20 22:16:44+00:00| seen|...

CVE-2025-71069

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2026-20726

creationtimestamp| type| source ---|---|--- 2026-03-17 19:30:40+00:00| seen| https://infosec.place/objects/5bdcc101-bda7-4b18-b21b-304536505c2e...

GHSA-M48G-4WR2-J2H6

creationtimestamp| type| source ---|---|--- 2026-03-12 23:40:05+00:00| seen| https://gist.github.com/alon710/9ef399a547181d8113741f42776f0b40...

CVE-2019-25539

creationtimestamp| type| source ---|---|--- 2026-03-12 18:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguydou5ec2d...

CVE-2026-28791

creationtimestamp| type| source ---|---|--- 2026-03-12 05:09:56+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-5hxf-c7j4-279c 2026-03-12 19:40:05+00:00| seen| https://gist.github.com/alon710/d73d499cf1d6e8d3c3762966f6b93ea2...

CVE-2025-66956

CVE-2025-66956 affects Asseco SEE Live 2.0’s Contact Plan, E-Mail, SMS and Fax components. Insecure access control permits remote attackers to access and execute attachments via a computable URL. Root cause is described as improper authorization checks in these components; the impact is remote ac...

GHSA-9Q2P-VC84-2RWM

creationtimestamp| type| source ---|---|--- 2026-03-09 22:10:06+00:00| seen| https://gist.github.com/alon710/c9b7b8cb1e830c7075cb4162b8d49b80...

CVE-2026-30854

creationtimestamp| type| source ---|---|--- 2026-03-07 19:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgikvwhgxw2v 2026-03-09 18:40:05+00:00| seen| https://gist.github.com/alon710/b35bd22da36673db291bcd39a01cd730...