CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

DEBIAN-CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

UBUNTU-CVE-2026-50574

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...

CVE-2026-45177

creationtimestamp| type| source ---|---|--- 2026-06-22 23:01:47+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movykbs7g52w 2026-07-09 01:23:02+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mq6hvkvtuv2z...

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

Azure File Sync Agent v22.4 Release – June 2026 (KB5104852)

Azure File Sync Agent v22.4 Release – June 2026 KB5104852...

A Critical Deadline Is Approaching for Windows and Linux Security

The cryptographic keys that secure your computer’s boot sequence will start to expire on June 24. Here’s what that means for you...

CVE-2026-11912

creationtimestamp| type| source ---|---|--- 2026-06-20 11:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mopsmtdged2h 2026-06-20 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mopsnvc2xj2l 2026-06-20 12:00:39+00:00| seen|...

CVE-2026-11551

creationtimestamp| type| source ---|---|--- 2026-06-20 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mookgqp4bp2f 2026-06-20 00:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116779492087943579 2026-06-20 01:01:06+00:00| seen|...

CVE-2026-11576

creationtimestamp| type| source ---|---|--- 2026-06-19 11:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monbwwekfi2r...

CVE-2026-12048

creationtimestamp| type| source ---|---|--- 2026-06-19 03:43:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momggbyg3x2y 2026-06-19 05:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3momkqp24jg2f 2026-06-22 11:31:44+00:00| seen|...

PT-2026-50893

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x through 26.3.0 Description A flaw in TLS hostname handling occurs when Node.js processes unicode dot separators, leading to a mismatch between resolver and verifier hostname normalization. This discrepancy can result in a...

CVE-2026-50196

creationtimestamp| type| source ---|---|--- 2026-06-18 23:05:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3molwuneim227...

GHSA-R253-R9JW-QG44

creationtimestamp| type| source ---|---|--- 2026-06-18 18:41:53+00:00| seen| https://gist.github.com/alon710/41babc051db96b1507f3fb804d7012be 2026-06-18 18:51:38+00:00| seen| https://gist.github.com/alon710/3807d480d537cf9538209dc130bd58ae 2026-06-18 19:02:49+00:00| seen|...

CVE-2026-54390

creationtimestamp| type| source ---|---|--- 2026-06-18 18:30:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3molhj2cqpl2v 2026-06-18 18:30:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116772530635095713 2026-06-18 21:33:43+00:00| seen|...

CVE-2026-10028

creationtimestamp| type| source ---|---|--- 2026-06-18 13:35:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mokx2qlab22b 2026-06-18 13:35:57+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mokx2r4vos2b...

CVE-2026-10094

creationtimestamp| type| source ---|---|--- 2026-06-17 09:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohzymnnry2n...

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor JCE to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...