CVE-2026-41461

SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via the uri request parameter is not sanitized before being used to construct outbound HTTP requests. Authenticated remote attackers...

CVE-2025-10549

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in this directory and achieve arbitrary code execution with highest privileges, because the affected...

CVE-2018-25309

creationtimestamp| type| source ---|---|--- 2026-04-29 20:29:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwuofx2r2k...

CVE-2026-27105

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...

CVE-2026-7390

creationtimestamp| type| source ---|---|--- 2026-04-29 18:51:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknrfmi7cz2n...

CVE-2026-41960

creationtimestamp| type| source ---|---|--- 2026-04-29 18:40:55+00:00| seen| https://bsky.app/profile/ifin-intel.org/post/3mknqs2ra3n2q 2026-05-15 11:46:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlvb34aetg2t...

CVE-2026-40230

creationtimestamp| type| source ---|---|--- 2026-04-29 18:35:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknqixmmn22q...

CVE-2026-2810

creationtimestamp| type| source ---|---|--- 2026-04-29 18:25:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknpx26o5f2e...

EUVD-2026-26269

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...

CVE-2026-27105

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...

CVE-2026-27105

Dell/Alienware Purchased Apps (affected: versions prior to 1.1.31.0) have an Improper Link Resolution Before File Access (Link Following) leading to Arbitrary File Write with local, low-privilege access. Exploitation details are not provided in the documents; the CVSS vectors indicate local acces...

CVE-2026-27105

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...

CVE-2026-42845

creationtimestamp| type| source ---|---|--- 2026-04-29 17:56:54+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-w4rc-p66m-x6qq...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in virtualenv-20.26.3-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in virtualenv-20.26.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-22702 DESCRIPTION: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...

CVE-2026-5166

creationtimestamp| type| source ---|---|--- 2026-04-29 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknixbwiho2e 2026-04-29 23:42:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkobnbgmuy2n 2026-04-30 03:00:43+00:00| seen|...

CVE-2026-7111

creationtimestamp| type| source ---|---|--- 2026-04-29 15:28:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkng2jxlx22e 2026-04-29 18:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknpo3nmon2n 2026-04-30 21:00:38+00:00| seen|...

CVE-2026-5161

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

CVE-2026-42652

creationtimestamp| type| source ---|---|--- 2026-04-29 14:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknebg6ruc2k...

CVE-2026-7248

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfilehtm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-7288

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...