CVE-2026-57366

creationtimestamp| type| source ---|---|--- 2026-07-20 18:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3x7e2xlx2e 2026-07-21 04:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4yq7e34e2o 2026-07-21 14:44:09+00:00| seen|...

CVE-2026-64206

creationtimestamp| type| source ---|---|--- 2026-07-20 18:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wqxhaly27 2026-08-06 04:47:51+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

GHSA-42H9-826W-CGV3

creationtimestamp| type| source ---|---|--- 2026-07-20 18:32:13+00:00| seen| https://gist.github.com/alon710/cdf2a5ef96b6a707eafe65a3f00899a3 2026-07-21 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6g7tzv2g...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2026-64191

creationtimestamp| type| source ---|---|--- 2026-07-20 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wixt7wk2i 2026-08-06 04:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-62183

creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r 2026-07-21 15:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j 2026-07-22 17:00:05+00:00| seen|...

CVE-2026-46410

creationtimestamp| type| source ---|---|--- 2026-07-20 18:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vcmpphg2a...

CVE-2026-35048

creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...

CVE-2026-57308

creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...

CVE-2026-35198

creationtimestamp| type| source ---|---|--- 2026-07-20 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qincwha2e 2026-07-20 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rids62y2q 2026-07-20 17:40:41+00:00| seen|...

CVE-2026-16252

creationtimestamp| type| source ---|---|--- 2026-07-20 16:43:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qhrgx4y2p...

CVE-2026-46428

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf3yend2i 2026-07-20 18:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3uqph73s2o 2026-07-28 16:35:09+00:00| published-proof-of-concept|...

CVE-2026-58414 Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32807

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

CVE-2026-16244

creationtimestamp| type| source ---|---|--- 2026-07-20 15:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3nsjha762i...

CVE-2026-63429 HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, POST /api/upload has no authentication guard, no global guard, no form-context validation, no openToken requirement, and no session cookie check. Any anonymous internet user can upload files PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, MP...

CVE-2026-32807

CVE-2026-32807 affects dataCycle-CORE prior to 25.07.3, where any user with a DataLink UUID can fetch an attached text file directly, even if expired or unauthenticated. The route is public and mailers embed the direct URL, allowing leaked or forwarded links to expose the attachment. Impact is co...

CVE-2026-32807 dataCycle Public DataLink Text File Download Ignores Validity And Authorization

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

CVE-2026-12701

creationtimestamp| type| source ---|---|--- 2026-07-20 15:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3marmjpe2v 2026-07-20 16:41:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qetak6c2j 2026-07-20 18:05:10+00:00| seen|...