65351 matches found
CVE-2026-71268
creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22...
CVE-2026-61486
creationtimestamp| type| source ---|---|--- 2026-08-05 14:50:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/eyof55exdtdoe...
CVE-2026-61891
creationtimestamp| type| source ---|---|--- 2026-08-05 14:34:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqpontbz2p...
CVE-2026-18933
creationtimestamp| type| source ---|---|--- 2026-08-05 14:33:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqom5zgp2c 2026-08-05 17:01:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043971069363515 2026-08-06 11:39:41+00:00| seen|...
CVE-2026-61483
creationtimestamp| type| source ---|---|--- 2026-08-05 14:30:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/jhvy6kzsbsna4...
CVE-2026-12410
CVE-2026-12410 affects CCleaner on Windows, specifically the Uninstaller component prior to version 7.10.1464. The issue is a local privilege escalation where a symlink/junction created during uninstallation can be followed by CCleaner when deleting the application data folder, allowing an attack...
Malicious code in multi-reqs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38937963f906d0bf3b4dac24a1a45f574aeb53cd2f268ffb9730d88bedf50bce The package's default export accepts token, password arguments and POSTs them, formatted as a Discord embed titled 'Yeni Hesap Bilgisi' with fields '...
CVE-2026-64634
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
CVE-2026-64631
creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...
GHSA-M4HF-6VGR-75R2
creationtimestamp| type| source ---|---|--- 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b...
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...
CVE-2026-71248
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn3sdny23 2026-08-05 12:37:13+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msdk5vqh5r2y...
GHSA-2GX6-7GX2-WWCF
creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...
CVE-2026-70588
creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...
CVE-2026-71231
creationtimestamp| type| source ---|---|--- 2026-08-05 11:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgfwm5ur2f...
CVE-2026-15452
creationtimestamp| type| source ---|---|--- 2026-08-05 10:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hpglrn2nlmpgf...
CVE-2026-7444
creationtimestamp| type| source ---|---|--- 2026-08-05 10:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g2qu2owwxt7mn 2026-08-06 13:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msg4qorpbj2g...
GHSA-4WX2-7GVJ-QFQ3
creationtimestamp| type| source ---|---|--- 2026-08-05 09:31:26+00:00| seen| https://gist.github.com/alon710/8a67496a2aeb5dc5719baf5a0f706ea5...
CVE-2026-15452 Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String
The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query String in all versions up to, and including, 6.11.3 due to insufficient input sanitization and output escaping. This makes it possible for...