PT-2026-60145

Name of the Vulnerable Software and Affected Versions grav-plugin-api versions prior to 1.0.4 Description An unauthenticated attacker can cause a password reset email to contain a link pointing to a server under their control. This occurs because the sanitizeHttpUrl function fails to verify the...

The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-15769

creationtimestamp| type| source ---|---|--- 2026-07-14 23:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnf5nd2jx2e 2026-07-16 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-17 21:37:06+00:00| seen|...

CVE-2026-48334

creationtimestamp| type| source ---|---|--- 2026-07-14 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndbdebps2z 2026-07-15 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116922110851046198 2026-07-15 04:30:28+00:00| seen|...

CVE-2026-48352

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsmovb22l...

CVE-2026-15738

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncsl2fl42i 2026-07-15 17:07:09+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hcc4fo2b...

CVE-2026-15772

creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbqvwgy52z 2026-07-15 23:02:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926482748057348 2026-07-16 04:45:25+00:00| seen|...

GHSA-9HC2-HJX8-Q6PV

creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:05+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337 2026-07-15 00:00:00+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337...

UBUNTU-CVE-2026-54572

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an...

CVE-2026-15750

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15643

creationtimestamp| type| source ---|---|--- 2026-07-14 22:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqna5acr362r 2026-07-15 17:07:13+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hgmo632m...

CVE-2026-48259

creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f 2026-07-15 10:18:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27 2026-07-18 03:37:06+00:00| seen|...

CVE-2026-48359

creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w2btli2t 2026-07-15 10:18:21+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimczvq22q 2026-07-18 03:07:07+00:00| seen|...

CVE-2026-15750

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15750 mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15750 mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15750

CVE-2026-15750 affects the project: mastergo-design / mastergo-magic-mcp, specifically the mcp__getComponentLink component. The vulnerable element is the function z.string in the file src/tools/get-component-link.ts . The issue arises from manipulating the argument url , enabling a server‑side re...

CVE-2026-55944

creationtimestamp| type| source ---|---|--- 2026-07-14 21:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4ha43uo2z 2026-07-14 22:02:11+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:43+00:00| seen|...

CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-61520 Simple Machines Forum SSRF via image proxy

Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vulnerability in the image proxy that allows authenticated attackers to trigger internal HTTP requests by embedding attacker-controlled URLs in BBCode image tags, which the pro...