CVE-2026-41003

creationtimestamp| type| source ---|---|--- 2026-06-10 04:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvt6vxdwr24 2026-06-19 02:11:28+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mombbn42ys2n...

CVE-2026-46373

creationtimestamp| type| source ---|---|--- 2026-06-10 02:47:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnvp3uya7z2o 2026-06-10 05:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvwk4iogo2p...

CVE-2026-40677

creationtimestamp| type| source ---|---|--- 2026-06-10 02:04:24+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mnvmn3gtd2pk...

CVE-2026-47838

creationtimestamp| type| source ---|---|--- 2026-06-10 01:47:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvlpsknco2h...

CVE-2026-46543

creationtimestamp| type| source ---|---|--- 2026-06-10 01:21:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvkcykcjk2y...

CVE-2026-46542

creationtimestamp| type| source ---|---|--- 2026-06-10 01:17:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvk3cqjhc2h...

CVE-2026-46546

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially crafted content in certain user-editable fields that, when surfaced in page metadata, caused visitors' browsers to navigate to...

CVE-2026-45782

creationtimestamp| type| source ---|---|--- 2026-06-10 01:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvjj7zznp2v...

CVE-2026-41837

creationtimestamp| type| source ---|---|--- 2026-06-10 00:50:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvikqeth72f...

CVE-2026-48265

creationtimestamp| type| source ---|---|--- 2026-06-10 00:31:02+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhvjwpa2d...

PT-2026-48380

Name of the Vulnerable Software and Affected Versions yt-dlp versions prior to 2026.06.09 Description When using aria2c as an external downloader for fragmented manifest formats like HLS or DASH streams, insufficiently sanitized input allows an attacker to perform arbitrary file writes. This occu...

TP-LINK Archer 操作系统命令注入漏洞

The TP-Link Archer AX12 V1, AX18 V1, AX1300 V1.6, and AX17 V1 are wireless routers that support VPN functionality, primarily providing network connection and management services. The TP-Link Archer operating system has a command injection vulnerability. This vulnerability stems from the failure t...

PT-2026-48379

Name of the Vulnerable Software and Affected Versions yt-dlp versions prior to 2026.06.09 Description A flaw allows a remote attacker to write arbitrary OS-shortcut files, such as .desktop, .url, and .webloc, to the user's filesystem. This occurs because the file extension allowlist used to preve...

PT-2026-48556

Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser...

The vulnerability of the Link Preview function in browsers Google Chrome and Microsoft Edge allows a hacker to bypass security restrictions.

The vulnerability of the Link Preview function in browsers such as Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

ALSA-2026:25113 Important: .NET 9.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime...

PT-2026-48555

Simple Link Directory through 9.0.4 interpolates the sld no results found option into a JavaScript string literal without encoding. Because sanitize text field leaves quotes intact, a stored payload breaks out of the string and runs script for every page visitor...

PT-2026-48550

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate post action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type...

bit7z 后置链接漏洞

bit7z is a file compression/uncompression tool developed by Riccardo as an individual project. Versions of bit7z prior to 4.0.12 had a post-installation link vulnerability. This vulnerability stemmed from the use of symbolic links during archive updates, allowing for arbitrary file overwriting...

WordPress plugin Simple Link Directory 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...