65105 matches found
PT-2026-57001
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description A topic featured link is not sufficiently normalized and escaped before being...
PT-2026-56933
Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 2025.4.6 Pimcore versions prior to 2026.1.6 Description An unauthenticated attacker who knows a valid admin username can take over an admin account by sending a password reset request containing an attacker-controlled...
PT-2026-56920
Name of the Vulnerable Software and Affected Versions D-link DIR-823G version 1.0.2B05 20181207 Description A weakness exists in the Web Interface component within the /etc/boa/boa.conf file. A remote attacker can perform a manipulation that leads to a least privilege violation. This attack is...
CVE-2026-39243
decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...
The vulnerability in the script/cgi-bin/app_mgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.
The vulnerability in the /cgi-bin/appmgr.cgi microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and...
Linux Distros Unpatched Vulnerability : CVE-2026-58203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a...
PT-2026-56968
Name of the Vulnerable Software and Affected Versions decompress versions prior to 4.2.2 Description An issue exists during archive extraction where arbitrary hardlink creation is possible. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly ...
CVE-2026-58210
creationtimestamp| type| source ---|---|--- 2026-07-08 23:10:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq6ai44tz62n...
CVE-2026-54590
creationtimestamp| type| source ---|---|--- 2026-07-08 22:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67v3wjmr2z 2026-07-20 09:53:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t 2026-07-20 09:53:36+00:00| seen|...
CVE-2026-8649
creationtimestamp| type| source ---|---|--- 2026-07-08 22:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67m5hson27 2026-07-10 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwa2beha2f 2026-07-11 01:47:04+00:00| seen|...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview yt-dlp is an A youtube-dl fork with additional features and patches Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via improper validation of input in the --write-link, --write-url-link,...
CVE-2026-55596
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66jmihnl27...
CVE-2026-58208
creationtimestamp| type| source ---|---|--- 2026-07-08 22:19:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65o5u3x42x 2026-07-11 10:25:23+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqeh56pdjb27 2026-07-11 10:25:25+00:00| seen|...
CVE-2026-8801
creationtimestamp| type| source ---|---|--- 2026-07-08 22:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65cl2ju42g 2026-07-09 19:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqaeg6yw7v2h 2026-07-10 19:56:03+00:00| seen|...
GHSA-VMWX-M75V-QVCH
creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:23+00:00| seen| https://gist.github.com/alon710/f5073530cad3dd719e641dcee2ba88b8...
CVE-2026-59935
creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq64xsux7c24 2026-07-10 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbllqmplz25...
CVE-2017-17990
creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq64x7paqs2k...
CVE-2026-60105
creationtimestamp| type| source ---|---|--- 2026-07-08 22:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mq64ms7gqd2w 2026-07-09 09:14:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq7cadytwy26 2026-07-11 00:30:32+00:00| seen|...
CVE-2026-59879
creationtimestamp| type| source ---|---|--- 2026-07-08 21:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i 2026-07-11 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n...