CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

CVE-2026-56114

dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...

CVE-2026-10609

creationtimestamp| type| source ---|---|--- 2026-06-23 16:01:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrkfzp7i2a...

CVE-2026-4610

creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...

CVE-2026-12969

creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...

CVE-2026-56248

creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...

CVE-2026-56322

creationtimestamp| type| source ---|---|--- 2026-06-23 14:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlc63flt2q...

CVE-2026-56222

creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...

CVE-2026-10711

creationtimestamp| type| source ---|---|--- 2026-06-23 13:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkhdtk2l2t...

CVE-2025-71365

creationtimestamp| type| source ---|---|--- 2026-06-23 13:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxk6f6zbv2o...

CVE-2026-2264

creationtimestamp| type| source ---|---|--- 2026-06-23 12:06:38+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3moxefoiklk2n...

GHSA-4Q6H-8P4V-67VQ

creationtimestamp| type| source ---|---|--- 2026-06-23 09:41:50+00:00| seen| https://gist.github.com/alon710/ca5754f7e7e7aeff3ad1cd262378f58b...

GHSA-GHMH-JHMJ-WCMF

creationtimestamp| type| source ---|---|--- 2026-06-23 08:41:51+00:00| seen| https://gist.github.com/alon710/36f3399c6d42cf95c9294583be143e55...

CVE-2026-4102

creationtimestamp| type| source ---|---|--- 2026-06-23 08:23:37+00:00| seen| https://gist.github.com/zanetworker/1c2f8d6638917ee25ed7da3865900455...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

CVE-2026-28496

creationtimestamp| type| source ---|---|--- 2026-06-23 07:40:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-28496.yaml 2026-06-23 16:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxs32hcvd2w 2026-06-23...

Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

MGASA-2026-0227 Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

CVE-2026-8172

The CVE-2026-8172 entry concerns the WordPress plugin Simple Basic Contact Form (through 20250114). The issue is a Reflected Cross-Site Scripting vulnerability caused by not escaping user-supplied input before reflecting it in the contact form output on validation errors. Impact described: unauth...

EUVD-2026-38418

The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cross-Site Scripting vulnerability that unauthenticated attackers can exploit against site visitors vi...