CVE-2026-11818

creationtimestamp| type| source ---|---|--- 2026-07-10 05:39:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgohp3n22f 2026-07-10 20:11:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxgpgezc2y...

CVE-2026-11392

creationtimestamp| type| source ---|---|--- 2026-07-10 05:38:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgn4q6ib2x 2026-07-10 05:38:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqbgniwg4v2k...

CVE-2026-21053

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...

decompress: Decompress: File disclosure and corruption via arbitrary hardlink creation

A flaw was found in decompress. An attacker can craft a malicious archive that, when extracted, allows for arbitrary hardlink creation. This vulnerability occurs because the x.linkname field from hardlink entries in the archive is processed without proper validation, enabling an attacker to creat...

CVE-2026-21053

CVE-2026-21053 describes an inability to properly validate input in Samsung Email before 6.2.13.1, allowing local attackers to create arbitrary files inside the app sandbox. Affected product/version: Samsung Email prior to 6.2.13.1. Root cause: improper input validation in the application. Impact...

EUVD-2026-42823

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...

CVE-2026-44918

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...

DEBIAN-CVE-2026-44918

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...

CVE-2026-44918

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...

GHSA-2PG6-44CX-C49V

creationtimestamp| type| source ---|---|--- 2026-07-10 04:12:07+00:00| seen| https://gist.github.com/alon710/894d931a4bc3b7f3c7f80c92512208e5...

GHSA-MJQX-C6F6-7RC2

creationtimestamp| type| source ---|---|--- 2026-07-10 03:41:59+00:00| seen| https://gist.github.com/alon710/bc442ee88dc103da228f4212da5b648e...

SUSE CVE-2026-59195

pnpm is a package manager. Prior to 10.34.4 and 11.8.0, pnpm accepts package names from the env lockfile configDependencies section and uses those names directly when creating config dependency symlinks under nodemodules/.pnpm-config. A malicious repository can commit a crafted pnpm-lock.yaml who...

GHSA-Q7JX-V53G-848W

creationtimestamp| type| source ---|---|--- 2026-07-10 02:42:38+00:00| seen| https://gist.github.com/alon710/c858490dcced6d8c05b3d0f0cec528f1...

GHSA-MC85-72GR-VM9F

creationtimestamp| type| source ---|---|--- 2026-07-10 02:12:08+00:00| seen| https://gist.github.com/alon710/771904cdd1d35750b64c7a038f4ce112...

GHSA-H74C-Q9J7-MPCM

creationtimestamp| type| source ---|---|--- 2026-07-10 01:12:43+00:00| seen| https://gist.github.com/alon710/c57bf8187a7fb4d8c5e9247f7948a17b...

CVE-2026-15311

creationtimestamp| type| source ---|---|--- 2026-07-10 00:57:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqawwlemrj2q 2026-07-10 19:55:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwjoofi22a...

CVE-2026-59858

creationtimestamp| type| source ---|---|--- 2026-07-10 00:40:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqavxyae4f2l 2026-07-10 19:54:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwikfmx22a 2026-07-11 01:45:18+00:00| seen|...

CVE-2026-59854

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqavozsbt62e...

EUVD-2026-42768

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

CVE-2026-59834

creationtimestamp| type| source ---|---|--- 2026-07-10 00:05:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatzwyiqf2w 2026-07-10 03:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb5ul4sqm2w 2026-07-10 05:03:37+00:00| seen|...