CVE-2026-29139

creationtimestamp| type| source ---|---|--- 2026-04-02 10:21:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miiyc7ndm32q 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI...

CVE-2026-29014

creationtimestamp| type| source ---|---|--- 2026-04-01 15:26:09+00:00| seen| Telegram/LPiyqtmOsuMBSJ4TiscGzigzJ0idlnzzivv75bN9d93RTXE 2026-04-01 15:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migyydiyl327 2026-04-01 16:29:53+00:00| seen|...

CVE-2026-30526

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0 . The flaw is located in the login page within the msg parameter , where the application reflects user input without proper HTML encoding or sanitization . This allows a remote attacker to inj...

CVE-2026-5180

creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:33+00:00| published-proof-of-concept| Telegram/1iWaApiUM0jOADSkCxbAhXY3iS1qKmB0s9RsJgnPCTY34SA 2026-03-31 07:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midoe6pofu2o...

CVE-2026-4996

creationtimestamp| type| source ---|---|--- 2026-03-28 13:15:28+00:00| published-proof-of-concept| Telegram/br59VXTdsrXIjQrxmwmULmHR5vTzBCK926-05m5zFA5U4A 2026-03-28 15:19:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4wmiajg725...

CVE-2026-33954 LinkAce discloses private notesto unauthorized authenticated users via the web link detail page

LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated user via the web interface. The API appears to correctly enforce note visibility, but the web link detail page renders...

CVE-2026-30567

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewproduct.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

globaleaks-whistleblowing-software 输入验证错误漏洞

globaleaks-whistleblowing-software is an open-source anonymous whistleblowing platform developed by GLOBALEAKS. Versions of globaleaks-whistleblowing-software prior to version 5.0.89 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of...

CVE-2026-33743

creationtimestamp| type| source ---|---|--- 2026-03-26 22:08:22+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-vg76-xmhg-j5x3 2026-03-27 00:11:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhytg7w7d32z...

CVE-2026-24993

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-04-09 03:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizukzu6di2t...

CVE-2026-3973

creationtimestamp| type| source ---|---|--- 2026-03-26 10:34:08+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhxfqdgode2z 2026-04-03 01:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikjfjbp4q2v...

CVE-2026-1561

creationtimestamp| type| source ---|---|--- 2026-03-24 15:30:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mhsvdoje7e2m 2026-03-26 00:14:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwd4t5c3w2i...

CVE-2026-32015

creationtimestamp| type| source ---|---|--- 2026-03-24 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhs7klyo6s2b 2026-03-29 02:00:05+00:00| seen| https://t.me/GithubRedTeam/77718...

CVE-2026-27625

creationtimestamp| type| source ---|---|--- 2026-03-20 10:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhidtnalex2n 2026-03-20 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjjd2f64525 2026-03-20 22:16:44+00:00| seen|...

CVE-2025-71069

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2026-20726

creationtimestamp| type| source ---|---|--- 2026-03-17 19:30:40+00:00| seen| https://infosec.place/objects/5bdcc101-bda7-4b18-b21b-304536505c2e...

GHSA-M48G-4WR2-J2H6

creationtimestamp| type| source ---|---|--- 2026-03-12 23:40:05+00:00| seen| https://gist.github.com/alon710/9ef399a547181d8113741f42776f0b40...

CVE-2019-25539

creationtimestamp| type| source ---|---|--- 2026-03-12 18:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguydou5ec2d...

CVE-2026-28791

creationtimestamp| type| source ---|---|--- 2026-03-12 05:09:56+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-5hxf-c7j4-279c 2026-03-12 19:40:05+00:00| seen| https://gist.github.com/alon710/d73d499cf1d6e8d3c3762966f6b93ea2...

CVE-2025-66956

Asseco SEE Live 2.0, a customer interaction and notification management system for financial services, is vulnerable to Insecure Access Control within its Contact Plan, E-Mail, SMS, and Fax components. This flaw allows remote attackers to access and execute attachments via a computable URL . An a...