64864 matches found
CVE-2026-57366
creationtimestamp| type| source ---|---|--- 2026-07-20 18:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3x7e2xlx2e 2026-07-21 04:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4yq7e34e2o 2026-07-21 14:44:09+00:00| seen|...
CVE-2026-64206
creationtimestamp| type| source ---|---|--- 2026-07-20 18:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wqxhaly27 2026-08-06 04:47:51+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
GHSA-42H9-826W-CGV3
creationtimestamp| type| source ---|---|--- 2026-07-20 18:32:13+00:00| seen| https://gist.github.com/alon710/cdf2a5ef96b6a707eafe65a3f00899a3 2026-07-21 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6g7tzv2g...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
CVE-2026-64191
creationtimestamp| type| source ---|---|--- 2026-07-20 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wixt7wk2i 2026-08-06 04:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-62183
creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r 2026-07-21 15:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j 2026-07-22 17:00:05+00:00| seen|...
CVE-2026-46410
creationtimestamp| type| source ---|---|--- 2026-07-20 18:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vcmpphg2a...
CVE-2026-35048
creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...
CVE-2026-57308
creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...
CVE-2026-35198
creationtimestamp| type| source ---|---|--- 2026-07-20 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qincwha2e 2026-07-20 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rids62y2q 2026-07-20 17:40:41+00:00| seen|...
CVE-2026-16252
creationtimestamp| type| source ---|---|--- 2026-07-20 16:43:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qhrgx4y2p...
CVE-2026-46428
creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf3yend2i 2026-07-20 18:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3uqph73s2o 2026-07-28 16:35:09+00:00| published-proof-of-concept|...
CVE-2026-58414 Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...
CVE-2026-32822
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...
CVE-2026-32807
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...
CVE-2026-16244
creationtimestamp| type| source ---|---|--- 2026-07-20 15:55:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3nsjha762i...
CVE-2026-63429 HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, POST /api/upload has no authentication guard, no global guard, no form-context validation, no openToken requirement, and no session cookie check. Any anonymous internet user can upload files PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, MP...
CVE-2026-32807
CVE-2026-32807 affects dataCycle-CORE prior to 25.07.3, where any user with a DataLink UUID can fetch an attached text file directly, even if expired or unauthenticated. The route is public and mailers embed the direct URL, allowing leaked or forwarded links to expose the attachment. Impact is co...
CVE-2026-32807 dataCycle Public DataLink Text File Download Ignores Validity And Authorization
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...
CVE-2026-12701
creationtimestamp| type| source ---|---|--- 2026-07-20 15:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3marmjpe2v 2026-07-20 16:41:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qetak6c2j 2026-07-20 18:05:10+00:00| seen|...