62414 matches found
CVE-2026-56003
creationtimestamp| type| source ---|---|--- 2026-07-08 12:41:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq55el3zo72x 2026-07-08 16:45:22+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-componenti-x.org 2026-07-09 00:01:47+00:00| seen|...
CVE-2026-57251
creationtimestamp| type| source ---|---|--- 2026-07-08 12:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq54sobdmj2t...
CVE-2026-57260
creationtimestamp| type| source ---|---|--- 2026-07-08 12:22:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq54c2bmsp26...
CVE-2026-57245
creationtimestamp| type| source ---|---|--- 2026-07-08 12:18:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq543depcy27...
CVE-2026-14250
The Themehunk Login Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.2. This is due to the handlefrontendregister function in the unauthenticated /thlogin/v1/register REST endpoint accepting a user-controlled 'role' parameter and...
CVE-2026-57252
creationtimestamp| type| source ---|---|--- 2026-07-08 11:52:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq52lrws4e27...
CVE-2026-41989
creationtimestamp| type| source ---|---|--- 2026-07-08 10:50:03+00:00| seen| https://bsky.app/profile/selfhost.directory/post/3mq4x4jjzqo2f 2026-07-28 16:50:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
CVE-2026-14495
creationtimestamp| type| source ---|---|--- 2026-07-08 08:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4psgrlep2i 2026-07-09 00:00:43+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq6dcev5hs2p...
CVE-2026-9731
creationtimestamp| type| source ---|---|--- 2026-07-08 08:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4oojt3zg2z...
CVE-2026-59996
creationtimestamp| type| source ---|---|--- 2026-07-08 04:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4ai3r6lf2w 2026-07-08 22:47:27+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mq677cepsk2y 2026-07-10 08:02:23+00:00| seen|...
CVE-2026-55077
creationtimestamp| type| source ---|---|--- 2026-07-08 00:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x...
CVE-2026-42953
creationtimestamp| type| source ---|---|--- 2026-07-08 00:02:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sw5xhxj2k...
(0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Send...
PT-2026-56585
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.5 through 18.11.6 GitLab CE/EE versions 19.0 through 19.0.3 GitLab CE/EE versions 19.1 through 19.1.1 Description An issue exists where an authenticated user can create a repository where the content displayed in the w...
UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075
This module enables you to use Single Directory Components in site building views, field formatters, blocks, layouts and it improves the Developer Experience DX with SDC. The module doesn't sufficiently sanitize the markup passed to components under certain scenarios. This vulnerability is...
CVE-2026-59253: Authorization Bypass Through User-Controlled Key
n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical...
CVE-2026-15067: Improper Neutralization of Special Elements used in an SQL Command
Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...
CVE-2026-55668: Improper Limitation of a Pathname to a Restricted Directory
File Browser provides a web file managing interface. Prior to 2.63.16, ScopedFs validates the nearest existing ancestor of a dangling symlink as in scope and then follows the symlink during file creation, allowing an authenticated user with Create and Modify permissions to create...
PT-2026-56466
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.16 Description An issue exists in the ScopedFs component where the system validates the nearest existing ancestor of a dangling symlink as being within scope and subsequently follows that symlink during file...