CVE-2026-54888

creationtimestamp| type| source ---|---|--- 2026-06-29 22:33:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphka2ti2e27 2026-06-29 23:30:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnfwlsoh2d...

CVE-2026-13762

creationtimestamp| type| source ---|---|--- 2026-06-29 22:08:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mphiu4vkl324 2026-06-29 22:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphl6qlfck2s 2026-06-29 23:12:40+00:00| seen|...

CVE-2026-53426

creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphiguy5rn2x 2026-06-29 22:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkestmkb2d 2026-06-29 23:20:45+00:00| seen|...

CVE-2026-56017

creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphigjaxpm2d 2026-06-29 22:37:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkhbvg2r2o 2026-06-29 23:50:11+00:00| seen|...

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

CVE-2026-13751

creationtimestamp| type| source ---|---|--- 2026-06-29 17:54:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2nxm6hf2t 2026-06-29 18:43:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5feg6v52o 2026-06-29 20:15:46+00:00| seen|...

CVE-2026-57327

creationtimestamp| type| source ---|---|--- 2026-06-29 16:27:30+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgvrp3nho24 2026-06-29 16:27:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvrtl7ka2n...

CVE-2026-57336

creationtimestamp| type| source ---|---|--- 2026-06-29 16:12:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguxcjsyv2d 2026-06-29 16:46:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwtct4wo2w 2026-06-29 20:44:54+00:00| seen|...

CVE-2026-57329

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguvpeeku2d 2026-06-29 16:11:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpguvtbqfo2w...

CVE-2026-12856

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDo...

CVE-2026-12856

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDo...

CVE-2026-12856

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDo...

WordPress Internal Links Manager plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin Internal Links Manager versions = 3.0.3...

PYSEC-2026-345 Gradio allows users to access arbitrary files

Impact This vulnerability allows users of Gradio applications that have a public link such as on Hugging Face Spaces to access files on the machine hosting the Gradio application. This involves intercepting and modifying the network requests made by the Gradio app to the server. Patches Yes, the...

CVE-2026-22078

creationtimestamp| type| source ---|---|--- 2026-06-29 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116832575628329249 2026-06-29 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpg4sdsfah27 2026-06-29 11:36:08+00:00| seen|...

CVE-2026-13515

creationtimestamp| type| source ---|---|--- 2026-06-29 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpf6mzfwn52e 2026-06-29 00:27:13+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpfa4kbvgq2c 2026-06-29 02:23:35+00:00| seen|...

PT-2026-53259

Name of the Vulnerable Software and Affected Versions vscode-java affected versions not specified Description The vscode-java extension, which provides Java language support for Visual Studio Code, incorrectly trusts all Markdown content in JavaDoc hovers. This allows a malicious Java file to...

CVE-2011-3417

creationtimestamp| type| source ---|---|--- 2026-06-28 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpe24giui52l 2026-06-28 13:07:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mpe24hdv4e2t...

CVE-2020-12762

creationtimestamp| type| source ---|---|--- 2026-06-27 14:58:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbpuclxns2j 2026-06-27 14:58:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpbpubuiok2j...

Improper Link Resolution Before File Access

gogs.io/gogs is vulnerable to Improper Link Resolution Before File Access. The vulnerability is due to improper validation of symbolic links in the UploadRepoFiles function, which only checks the final upload target instead of every path component, allowing an attacker with repository write acces...