CVE-2026-54202 TeamDavid: Path Traversal in the archive creation functionality

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...

GHSA-P8X7-9VFW-P7VC

creationtimestamp| type| source ---|---|--- 2026-08-07 09:39:30+00:00| seen| https://gist.github.com/alon710/839078dc1e6146ea4d82f12eb4312cc5...

CVE-2026-15211

creationtimestamp| type| source ---|---|--- 2026-08-07 08:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2p4g7ey6kaj6b...

GHSA-PMHH-3W7G-XQP8

creationtimestamp| type| source ---|---|--- 2026-08-07 08:33:25+00:00| seen| https://gist.github.com/alon710/b4340b7774927252fafb9cfdb5e51a49...

GHSA-8HCV-X26H-MCGP

creationtimestamp| type| source ---|---|--- 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f...

CVE-2026-16633

creationtimestamp| type| source ---|---|--- 2026-08-07 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117052697803115128 2026-08-07 07:37:49+00:00| seen| https://gist.github.com/alon710/49e34188f9c47f29b61522ee6a9c6906...

GHSA-J4R3-HG7J-8CHG

creationtimestamp| type| source ---|---|--- 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...

CVE-2026-45204

creationtimestamp| type| source ---|---|--- 2026-08-07 04:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itsamjl4gbagk...

GHSA-7HXC-F267-H5Q7

creationtimestamp| type| source ---|---|--- 2026-08-07 02:36:06+00:00| seen| https://gist.github.com/alon710/1974365b37727353ce889eba0d08c78c...

CVE-2026-50481

creationtimestamp| type| source ---|---|--- 2026-08-07 00:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshdsijkna2l 2026-08-08 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mske3i7aa722 2026-08-11 19:00:39+00:00| seen|...

CVE-2026-70332

creationtimestamp| type| source ---|---|--- 2026-08-07 00:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4lj3nhvrrea35 2026-08-07 01:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mshehxaaht2a 2026-08-07 01:30:27+00:00| seen|...

CVE-2026-5857

creationtimestamp| type| source ---|---|--- 2026-08-07 00:37:02+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctz6ra52l 2026-08-10 02:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msoywprfwe23...

GHSA-596P-6JV8-775V

creationtimestamp| type| source ---|---|--- 2026-08-07 00:33:31+00:00| seen| https://gist.github.com/alon710/c7b44a1ea6b80e7066b89d9f2735b13f...

CVE-2026-19175

creationtimestamp| type| source ---|---|--- 2026-08-06 23:49:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117051240113170047 2026-08-07 04:48:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-09 06:18:04+00:00| seen|...

GHSA-6HR6-W5QG-QMWG

creationtimestamp| type| source ---|---|--- 2026-08-06 23:32:34+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b 2026-08-07 00:07:12+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b...

CVE-2026-19138

creationtimestamp| type| source ---|---|--- 2026-08-06 23:24:57+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117051134731540251 2026-08-07 04:45:41+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260807 2026-08-13 09:46:23+00:00| seen|...

CVE-2026-64664

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belonged to an existing user, without having permission to view...

CVE-2026-48085

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to /setup/create-admin-account and creates additional GLOBALADMIN accounts without...

CVE-2026-48085 OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to /setup/create-admin-account and creates additional GLOBALADMIN accounts without...

CVE-2026-48085 OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to /setup/create-admin-account and creates additional GLOBALADMIN accounts without...