Hermes Agent 后置链接漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring self-learning capabilities. Version 0.8.0 of Hermes Agent has a post-link vulnerability, which stems from improper handling of the checksensitivepath function in the tools/filetools.py file. This vulnerability may lead to...

TÜBİTAK BİLGEM Pardus About 后置链接漏洞

TÜBİTAK BİLGEM Pardus About is a component module of the Turkish company TÜBİTAK BİLGEM that provides functionality for displaying operating system information and system descriptions. Versions of TÜBİTAK BİLGEM Pardus About prior to 1.2.1 had a post-link vulnerability; this vulnerability stemmed...

PT-2026-35971

Name of the Vulnerable Software and Affected Versions Dell/Alienware Purchased Apps versions prior to 1.1.31.0 Description An improper link resolution before file access, also known as link following, allows a low privileged attacker with local access to perform an arbitrary file write. Link...

PT-2026-35928

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before v1.2.1...

CVE-2026-6551

creationtimestamp| type| source ---|---|--- 2026-04-28 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mklqnmviap2a 2026-04-29 13:44:53+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mknaapny5o2u...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-7291

creationtimestamp| type| source ---|---|--- 2026-04-28 21:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklix4i7rf2k...

CVE-2026-7295

creationtimestamp| type| source ---|---|--- 2026-04-28 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklif7mghe2r...

CVE-2026-7294

creationtimestamp| type| source ---|---|--- 2026-04-28 20:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklhtcqdkx2t...

CVE-2026-42424

creationtimestamp| type| source ---|---|--- 2026-04-28 20:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklhln6esw2e...

CVE-2026-42428

creationtimestamp| type| source ---|---|--- 2026-04-28 20:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgzlawgp2t...

CVE-2026-42430

creationtimestamp| type| source ---|---|--- 2026-04-28 20:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklguovjtu2q...

CVE-2026-5794

creationtimestamp| type| source ---|---|--- 2026-04-28 20:35:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgq7fmoj2k...

CVE-2026-42429

creationtimestamp| type| source ---|---|--- 2026-04-28 20:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklg64g6io2q...

CVE-2026-6238

creationtimestamp| type| source ---|---|--- 2026-04-28 20:22:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfyc2yf52v...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

EUVD-2026-26144

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-6970

creationtimestamp| type| source ---|---|--- 2026-04-28 20:11:02+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mklfebpkit2s 2026-05-01 07:03:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrkpz77ed26 2026-05-06 07:40:29+00:00| seen|...

CVE-2026-7348

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklugzsstg2e 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7358

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvarfm3u2h 2026-05-03 18:00:00+00:00| seen|...