Mailing-list archive
No vulnerabilities published in this period.
March 2026
- [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability
full-disclosure - Dovecot Security Advisory OXDC-2026-0001
full-disclosure - SEC Consult SA-20260326-0 :: Local Privilege Escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library
full-disclosure - OpenClaw MEDIA: Protocol Prompt Injection - File Disclosure Bypassing Tool Permissions (Silently Fixed, Report Denied)
full-disclosure - APPLE-SA-03-24-2026-10 Xcode 26.4
full-disclosure - APPLE-SA-03-24-2026-9 Safari 26.4
full-disclosure - APPLE-SA-03-24-2026-8 visionOS 26.4
full-disclosure - APPLE-SA-03-24-2026-7 watchOS 26.4
full-disclosure - APPLE-SA-03-24-2026-6 tvOS 26.4
full-disclosure - APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5
full-disclosure - APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5
full-disclosure - APPLE-SA-03-24-2026-3 macOS Tahoe 26.4
full-disclosure - APPLE-SA-03-24-2026-2 iOS 18.7.7 and iPadOS 18.7.7
full-disclosure - APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4
full-disclosure - [KIS-2026-05] MailEnable <= 10.54 Multiple Reflected Cross-Site Scripting Vulnerabilities
full-disclosure - Apple OHTTP Relay: 14 Third-Party Endpoints, 6 Countries, Zero User Visibility
full-disclosure - CVE-2026-33150, CVE-2026-33179: libfuse io_uring memory safety vulnerabilities (use-after-free, NULL deref)
full-disclosure - SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS
full-disclosure - APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2
full-disclosure - snap-confine + systemd-tmpfiles = root (CVE-2026-3888)
full-disclosure - SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform
full-disclosure - UPDATE: Ant Group Censors 4 Security Research Articles After Initial Complaint Rejection
full-disclosure - Alipay DeepLink+JSBridge Attack Chain: Silent GPS Exfiltration, 17 Vulns, 6 CVEs (CVSS 9.3)
full-disclosure - APPLE-SA-03-11-2026-2 iOS 15.8.7 and iPadOS 15.8.7
full-disclosure - APPLE-SA-03-11-2026-1 iOS 16.7.15 and iPadOS 16.7.15
full-disclosure - Cohesity TranZman Migration Appliance - 5 CVEs (command injection, LPE, unsigned patches, weak crypto)
full-disclosure - JSON Deserialiser Unconstrained Resource Consumption Quick Overview
full-disclosure