Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the ExtractRelativeToDirectoryAsync path handling in src/libraries/System.Formats.Tar/src/System/Formats/Tar/TarEntry.cs. An attacker can create a tar archive that extracts a symbolic link whose target is a roote...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup before subsequent mount syscall. An attacker can overwrite arbitrary files on the host or cause denial of service by exploiting a race condition where a symlink is create...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup before subsequent mount syscall. An attacker can overwrite arbitrary files on the host or cause denial of service by exploiting a race condition where a symlink is create...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following during docker cp mount setup due to the switching from GetResourcePath and to createIfNotExists method that has no absolute path checks. An attacker can create empty files or directories at arbitrary...

CVE-2026-42559

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae...

GHSA-FVH2-GM75-J4J7

creationtimestamp| type| source ---|---|--- 2026-05-18 17:40:50+00:00| seen| https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae...

Exploit for CVE-2024-34070

Exploit for CVE-2024-34070 Credit to froxlor for the vuln dis...

CVE-2026-7302

creationtimestamp| type| source ---|---|--- 2026-05-18 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2l2fzt2g...

GHSA-5GM9-622F-QCG5 LibreNMS: Cross-Site Scripting in ShowConfigController

Summary A Stored Cross-Site Scripting XSS vulnerability exists in the ShowConfig page of devices affected by the RANCID Integration settings. The application fails to properly sanitise the rancidrepourl configuration value. When a user navigates to a device's configuration page, this unsanitised...

CVE-2026-26462

creationtimestamp| type| source ---|---|--- 2026-05-18 16:37:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5cqqq5xl2k 2026-05-30 11:00:50+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vjwfts32z...

CVE-2026-40796

creationtimestamp| type| source ---|---|--- 2026-05-18 16:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm5cizjp7a2c...

CVE-2025-67202

A flaw was found in Sidekiq-cron, an open-source scheduling add-on for Sidekiq. A remote attacker could exploit this cross-site scripting XSS vulnerability by injecting malicious scripts into a crafted URL. When this URL is rendered from cron.erb, the attacker's script would execute in the victim...

CVE-2026-0983

creationtimestamp| type| source ---|---|--- 2026-05-18 12:46:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vth5h7t2p 2026-05-19 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mm7claemwb2n...

CVE-2026-7301

creationtimestamp| type| source ---|---|--- 2026-05-18 12:28:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4ut5mmst2p...

CVE-2026-43487

A flaw was found in the Linux kernel's libata-core module. This vulnerability arises from issues with Link Power Management LPM when specific Seagate BarraCuda hard drives e.g., ST1000DM010-2EP102 are connected. This can lead to random system freezes, resulting in a denial of service for the...

CVE-2026-8751

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mm4s4budgk23...

CVE-2026-6346

creationtimestamp| type| source ---|---|--- 2026-05-18 10:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4pj4wb2b2i 2026-05-18 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5hfq7huy2t 2026-05-21 02:37:09+00:00| seen|...

CVE-2026-6341

creationtimestamp| type| source ---|---|--- 2026-05-18 09:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4kb2qod22k...

CVE-2026-3495

creationtimestamp| type| source ---|---|--- 2026-05-18 09:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jg7ejsq2p...

CVE-2026-6381

creationtimestamp| type| source ---|---|--- 2026-05-18 08:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4iucfrwj2e 2026-05-30 11:01:39+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vleu4kp2g...