CVE-2025-32748

creationtimestamp| type| source ---|---|--- 2026-06-17 18:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiw4z3z2f2b...

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Summary The API endpoint POST /api/v1/repos/owner/repo/forks only checks IsOrgMember when a user forks a repository into an organization, but does not check CanCreateOrgRepo. The web UI fork handler correctly checks both. This allows a read-only organization member — in a team with...

GHSA-FHX7-M96W-MV29 Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Summary The API endpoint POST /api/v1/repos/owner/repo/forks only checks IsOrgMember when a user forks a repository into an organization, but does not check CanCreateOrgRepo. The web UI fork handler correctly checks both. This allows a read-only organization member — in a team with...

CVE-2026-11525

creationtimestamp| type| source ---|---|--- 2026-06-17 17:34:09+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moitvr3dbc2g 2026-06-18 15:59:06+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72ndrtt2r 2026-06-23 12:01:44+00:00| seen|...

CVE-2026-55743

creationtimestamp| type| source ---|---|--- 2026-06-17 17:32:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitszfh732r...

CVE-2026-32804

creationtimestamp| type| source ---|---|--- 2026-06-17 17:23:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitcf5f5w2f 2026-07-23 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrcnf7csgh2u...

CVE-2026-6733

creationtimestamp| type| source ---|---|--- 2026-06-17 17:17:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moisymujdc2g 2026-06-18 15:59:06+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72ngg572i 2026-06-24 12:00:55+00:00| seen|...

CVE-2026-9679

creationtimestamp| type| source ---|---|--- 2026-06-17 16:59:18+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moirxg7wts2g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72nba3o2f 2026-06-23 12:01:41+00:00| seen|...

CVE-2024-37496

creationtimestamp| type| source ---|---|--- 2026-06-17 14:48:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moikn2xiru2j...

CVE-2026-26203

creationtimestamp| type| source ---|---|--- 2026-06-17 14:23:00+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moij7wsjd22b 2026-06-17 14:23:01+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moij7xtwns2b...

CVE-2026-54187

creationtimestamp| type| source ---|---|--- 2026-06-17 14:18:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiixqsrmt2f 2026-06-17 17:13:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moisqmb2tb27...

CVE-2026-54805

creationtimestamp| type| source ---|---|--- 2026-06-17 14:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiidazo7y25...

CVE-2026-54415 Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

Missing Authorization in the server management routes routes/admin.php in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email...

CVE-2026-52706

creationtimestamp| type| source ---|---|--- 2026-06-17 13:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihui2ijg2g...

CVE-2026-11858

creationtimestamp| type| source ---|---|--- 2026-06-17 13:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihmi6ezz2j...

CVE-2026-54803

creationtimestamp| type| source ---|---|--- 2026-06-17 13:52:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihiv5eir2v...

CVE-2026-54185

creationtimestamp| type| source ---|---|--- 2026-06-17 13:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moih7e5wqh2v...

CVE-2026-54811

creationtimestamp| type| source ---|---|--- 2026-06-17 13:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moih4isqri25...

CVE-2026-49068

creationtimestamp| type| source ---|---|--- 2026-06-17 13:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moiemgb6lj2c...

CVE-2026-46871

creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:34+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiayeen2k2g...