CVE-2026-54469

creationtimestamp| type| source ---|---|--- 2026-07-10 15:30:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116896393517811948 2026-07-10 17:27:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcoasxcp327 2026-07-10 21:24:23+00:00| seen|...

CVE-2026-56765

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission checks against user-supplied task IDs but fetches...

GHSA-4VJ7-5MJ6-JM8M

creationtimestamp| type| source ---|---|--- 2026-07-10 15:11:59+00:00| seen| https://gist.github.com/alon710/6a1f370c6283107f299350100ca84db2...

CVE-2026-48138

creationtimestamp| type| source ---|---|--- 2026-07-10 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqceqewuyp2g...

CVE-2026-29519

Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by embedding HTML or JavaScript payloads...

CVE-2026-57229

creationtimestamp| type| source ---|---|--- 2026-07-10 14:00:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25...

CVE-2026-56765 Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission checks against user-supplied task IDs but fetches...

CVE-2026-56765 Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission checks against user-supplied task IDs but fetches...

CVE-2026-56312 Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint

Capgo before 12.128.2 contains an improper validation vulnerability in the acceptinvitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn...

CVE-2026-9857

creationtimestamp| type| source ---|---|--- 2026-07-10 12:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc6czb7p427 2026-07-10 21:23:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd3h22ks422 2026-07-10 21:23:34+00:00| seen|...

CVE-2026-14461

creationtimestamp| type| source ---|---|--- 2026-07-10 12:27:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5i5xosi2x 2026-07-10 14:21:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcdud4c3b26 2026-07-10 16:15:07+00:00| seen|...

CVE-2026-12955

creationtimestamp| type| source ---|---|--- 2026-07-10 12:13:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4oz4s4a2i 2026-07-10 21:13:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2vwd6tv2s...

CVE-2026-14475

creationtimestamp| type| source ---|---|--- 2026-07-10 12:10:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4ksozb32a 2026-07-10 16:50:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcm7br7362s 2026-07-10 21:14:19+00:00| seen|...

CVE-2026-12400

creationtimestamp| type| source ---|---|--- 2026-07-10 11:47:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc3asfthd2a 2026-07-10 21:16:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd32za45n2e 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-39822

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-40452

creationtimestamp| type| source ---|---|--- 2026-07-10 11:19:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbzoiuofj2d 2026-07-10 12:15:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40452 2026-07-10 21:18:16+00:00| seen|...

CVE-2026-40454

creationtimestamp| type| source ---|---|--- 2026-07-10 11:11:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbz7ub5sf2f 2026-07-10 12:15:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40454 2026-07-10 13:34:44+00:00| seen|...

CVE-2026-40008

creationtimestamp| type| source ---|---|--- 2026-07-10 11:04:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbyv3qycz22 2026-07-10 12:15:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40008 2026-07-10 13:21:41+00:00| seen|...

CVE-2026-58374

A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-15332

creationtimestamp| type| source ---|---|--- 2026-07-10 09:34:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbttvnaer2a 2026-07-10 22:01:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd5l7hit62w...