CVE-2026-48768

creationtimestamp| type| source ---|---|--- 2026-06-18 00:00:44+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mojjj35nrc2t 2026-06-18 01:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojpsuhhbw2z 2026-06-19 14:10:24+00:00| seen|...

PT-2026-50676

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes sbx fail to re-apply the ICMP egress authorizer to networks rebuilt from disk after a Docker daemon restart. This allows a restart-surviving sandbox to forward ICMP...

CVE-2026-48817

creationtimestamp| type| source ---|---|--- 2026-06-17 23:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27...

CVE-2026-12567

The githubworkflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location...

CVE-2026-39560

creationtimestamp| type| source ---|---|--- 2026-06-17 23:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mojgufnwu72s...

CVE-2026-55200

creationtimestamp| type| source ---|---|--- 2026-06-17 22:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojg22moug2f 2026-06-22 09:58:44+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116793168556043170 2026-06-23 09:02:19+00:00| seen|...

CVE-2026-12529

creationtimestamp| type| source ---|---|--- 2026-06-17 22:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojf3ha6tj2k...

CVE-2026-53805

creationtimestamp| type| source ---|---|--- 2026-06-17 21:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojcnac43b2v 2026-06-18 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mokcncgamb2g 2026-07-16 19:00:08+00:00| seen|...

CVE-2026-55196

creationtimestamp| type| source ---|---|--- 2026-06-17 21:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojbah6mma2f 2026-06-22 00:31:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3xbtzo2m...

CVE-2026-53871

creationtimestamp| type| source ---|---|--- 2026-06-17 21:28:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojayqynw62f...

CVE-2026-8673

creationtimestamp| type| source ---|---|--- 2026-06-17 21:19:15+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojaidpcwb2j...

CVE-2026-44723

creationtimestamp| type| source ---|---|--- 2026-06-17 21:16:20+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojacor35o24 2026-07-04 12:23:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mpt2h4rlf52i...

CVE-2026-48823 Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search

Shaarli is a personal bookmarking service. Versions 0.16.1 and prior contain a stored Cross-Site Scripting XSS vulnerability in the tag filtering functionality of Shaarli. An authenticated user can inject arbitrary JavaScript into the tags field when creating a bookmark Shaare. The malicious...

GHSA-MX8G-39Q3-5C79

creationtimestamp| type| source ---|---|--- 2026-06-17 18:51:46+00:00| seen| https://gist.github.com/alon710/3232f2e304614604da98b70a9e646950...

CVE-2026-20220

creationtimestamp| type| source ---|---|--- 2026-06-17 18:21:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwkjvl2j2m 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928...

CVE-2026-1288

creationtimestamp| type| source ---|---|--- 2026-06-17 18:18:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwfnausf2m...

CVE-2025-32748

creationtimestamp| type| source ---|---|--- 2026-06-17 18:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiw4z3z2f2b...

Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Summary The API endpoint POST /api/v1/repos/owner/repo/forks only checks IsOrgMember when a user forks a repository into an organization, but does not check CanCreateOrgRepo. The web UI fork handler correctly checks both. This allows a read-only organization member — in a team with...

GHSA-FHX7-M96W-MV29 Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration

Summary The API endpoint POST /api/v1/repos/owner/repo/forks only checks IsOrgMember when a user forks a repository into an organization, but does not check CanCreateOrgRepo. The web UI fork handler correctly checks both. This allows a read-only organization member — in a team with...

CVE-2026-11525

creationtimestamp| type| source ---|---|--- 2026-06-17 17:34:09+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moitvr3dbc2g 2026-06-18 15:59:06+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72ndrtt2r 2026-06-23 12:01:44+00:00| seen|...