64936 matches found
CVE-2026-50574
creationtimestamp| type| source ---|---|--- 2026-07-14 08:07:19+00:00| seen| https://gist.github.com/akib-h/a603a4aaf4aab24ac683c30e9a2ad670 2026-07-18 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwvuwkmrv2l...
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...
CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
EUVD-2026-43632
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-6851
The CVE-2026-6851 entry concerns Bitdefender products on Windows: Bitdefender Total Security and Bitdefender Internet Security, specifically the File Shredder module. The vulnerability is described as an improper link resolution before file access (link following) that enables a less-privileged l...
CVE-2026-11802
creationtimestamp| type| source ---|---|--- 2026-07-14 06:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlk4nvqvm26 2026-07-19 20:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzn5ltmxb27...
CVE-2026-7640
creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...
CVE-2026-15629
creationtimestamp| type| source ---|---|--- 2026-07-14 05:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlizzzk3r2g 2026-07-19 20:06:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzleascuc2a...
CVE-2026-11390
creationtimestamp| type| source ---|---|--- 2026-07-14 05:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqline2oyb2x 2026-07-19 20:04:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzla3x53e2i...
CVE-2026-53364
creationtimestamp| type| source ---|---|--- 2026-07-14 03:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcqy52x52y 2026-07-16 08:21:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsk6jdkt2n...
CVE-2026-61505
creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...
CVE-2026-61502
creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc6vdxiy2s...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629
CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...
EUVD-2026-43618
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-57856
creationtimestamp| type| source ---|---|--- 2026-07-14 02:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6yqzdqc2k...
CVE-2026-57855
creationtimestamp| type| source ---|---|--- 2026-07-14 02:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mql6pslbe62e...