CVE-2026-50881

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:50+00:00| seen| https://gist.github.com/pyuysig/68754e4c40161ea27fcf80be46c59e7c...

CVE-2026-50877

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:44+00:00| seen| https://gist.github.com/pyuysig/ed896b93637aa6501e5f80def198c626...

CVE-2026-50871

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:36+00:00| seen| https://gist.github.com/pyuysig/01f00b5d7575f5a776b1f132ef9ecb46...

CVE-2026-50869

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:34+00:00| seen| https://gist.github.com/pyuysig/95931ed2140f3bd85dc67057dd23a47f...

CVE-2026-39196

creationtimestamp| type| source ---|---|--- 2026-06-13 12:45:31+00:00| seen| https://gist.github.com/pyuysig/423b15c69e3cd851c1e24c1312a0551a...

CVE-2026-44786

creationtimestamp| type| source ---|---|--- 2026-06-13 12:12:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo6a2d7wgh2f...

CVE-2026-54230

creationtimestamp| type| source ---|---|--- 2026-06-13 05:37:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo5jzaofah2d 2026-06-15 14:04:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3modhaiduso2d 2026-06-29 18:19:05+00:00| seen|...

CVE-2026-54164

creationtimestamp| type| source ---|---|--- 2026-06-13 05:28:06+00:00| seen| https://bsky.app/profile/soyuka.me/post/3mo5jhr2ux22s 2026-07-02 11:57:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny46qtik2u 2026-08-07 17:31:49+00:00| seen|...

CVE-2026-54055

A flaw was found in Kitty, a cross-platform GPU-based terminal. A local attacker, specifically a child process running within the terminal, can exploit a Time-of-Check-Time-of-Use TOCTOU race condition in the file transmission protocol. This allows the attacker to create a symbolic link between a...

CVE-2026-54398

creationtimestamp| type| source ---|---|--- 2026-06-13 02:14:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo56n2nt6m2j...

CVE-2026-53836

creationtimestamp| type| source ---|---|--- 2026-06-13 01:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55nx4j3y2q 2026-06-16 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moembwzxqy2m...

CVE-2026-53823

creationtimestamp| type| source ---|---|--- 2026-06-13 01:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55eypeht2v 2026-06-16 06:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mof52ftlwl2o...

CVE-2026-53868

creationtimestamp| type| source ---|---|--- 2026-06-13 01:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo543qubjy23...

PT-2026-49083

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L version 1.10.01 Description A format string issue exists in the HTTP Handler component within the file '/web/cgi-bin/greece/rhea'. The problem occurs in the snprintf function when the data argument is manipulated, allowing a...

CVE-2026-48165

creationtimestamp| type| source ---|---|--- 2026-06-12 23:12:00+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo4uhdc5ui2o 2026-06-16 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mogqzcvdi22e 2026-07-10 15:57:35+00:00| seen|...

CVE-2026-12129

creationtimestamp| type| source ---|---|--- 2026-06-12 23:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4u3tkkca2p...

CVE-2026-47138

creationtimestamp| type| source ---|---|--- 2026-06-12 21:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4o75lknj2t...

GHSA-5WW9-JG6Q-38R7 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix

Summary A low-privileged authenticated user of filebrowser with create + delete permissions in their own isolated scope can silently destroy share-link records belonging to any other user — including the administrator — by performing a legitimate DELETE on a file in their own directory whose...

CVE-2026-45011

CVE-2026-45011 affects ApostropheCMS 4.29.0, where a stored XSS can be injected via a javascript: URL in an image widget link. A user with Editor rights can publish the widget, enabling arbitrary JavaScript execution when a viewer clicks the link. Public patch status: at time of publication there...

CVE-2026-45011 Apostrophe has stored XSS via javascript: URL in Image Widget Link

ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the Editor role can configure an image widget link to use a javascript: URL payload. Because editors have permission to...