CVE-2026-16448

The CVE-2026-16448 entry applies to D-Link DNS-series devices (e.g., DNS-120, DNS-320/325/327L, DNS-1550-04, etc.) up to 20260205. The affected element is function cgi_check_rsync_rw in /cgi-bin/remote_backup.cgi. Manipulating the ip argument results in a remote command injection, enabling remote...

EUVD-2026-46265

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function...

CVE-2026-8285

creationtimestamp| type| source ---|---|--- 2026-07-21 14:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ylmaf242q...

CVE-2026-16406

creationtimestamp| type| source ---|---|--- 2026-07-21 14:05:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5y4uciwk24 2026-07-21 20:58:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p5tarqm2k 2026-07-22 04:47:48+00:00| seen|...

CVE-2026-16399

creationtimestamp| type| source ---|---|--- 2026-07-21 13:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xc7peii2o 2026-07-22 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

EUVD-2026-46258

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447

CVE-2026-16447 concerns a vulnerability in the D-Link DNS-320 1.0.2 where the argument Filedata[] in /web/jquery/uploader/multi_uploadify.php can be manipulated to achieve unrestricted upload. Remote exploitation is possible according to the provided records. The affected component is a server-si...

SUSE CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

vulnerabilities present in Microsoft Office

Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...

EUVD-2026-46186

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 through 11052026...

GHSA-F4GW-2P7V-4548

creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:41+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6mivxy24...

CVE-2026-54370

creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:17+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5uytuq2r 2026-07-30 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrufedkcaz2i...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-15370

creationtimestamp| type| source ---|---|--- 2026-07-21 10:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i...

CVE-2026-13694

creationtimestamp| type| source ---|---|--- 2026-07-21 09:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kag5gbv2e...

CVE-2026-15305

creationtimestamp| type| source ---|---|--- 2026-07-21 08:55:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5grm6cjl2z...

GHSA-PG7V-JWJ7-P798

creationtimestamp| type| source ---|---|--- 2026-07-21 08:31:39+00:00| seen| https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3...

GHSA-VJC4-5QP5-M44J

creationtimestamp| type| source ---|---|--- 2026-07-21 07:31:35+00:00| seen| https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad...

CVE-2026-6952

creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...