CVE-2026-7873

creationtimestamp| type| source ---|---|--- 2026-07-01 18:10:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4ibmvya2b 2026-07-03 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mppmlrmxi52r 2026-07-03 12:22:26+00:00| seen|...

CVE-2025-36333

creationtimestamp| type| source ---|---|--- 2026-07-01 18:09:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4f3psxy2p...

CVE-2026-58138

creationtimestamp| type| source ---|---|--- 2026-07-01 17:59:24+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpm3tty4fp25 2026-07-13 22:00:16+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-14 00:00:32+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-15...

CVE-2026-34103

creationtimestamp| type| source ---|---|--- 2026-07-01 17:43:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2xmdmci2a 2026-07-01 23:03:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpmmug6efc2r 2026-07-02 08:27:18+00:00| seen|...

CVE-2026-34102

creationtimestamp| type| source ---|---|--- 2026-07-01 17:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2gy7a572n 2026-07-02 08:26:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmd5kgjm2y 2026-07-02 09:46:35+00:00| seen|...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-34100

creationtimestamp| type| source ---|---|--- 2026-07-01 17:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2ab3ta22p 2026-07-02 08:28:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmfaow5r2m 2026-07-02 12:02:37+00:00| seen|...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-7517

creationtimestamp| type| source ---|---|--- 2026-07-01 17:10:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplz4clqbz2f...

CVE-2026-24250

creationtimestamp| type| source ---|---|--- 2026-07-01 16:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwvojx5z2h 2026-07-02 04:29:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn72yqmkt2l...

CVE-2026-24245

creationtimestamp| type| source ---|---|--- 2026-07-01 16:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26 2026-07-02 04:27:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k...

CVE-2026-58127

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET...

CVE-2026-58029

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php,...

CVE-2026-58028

creationtimestamp| type| source ---|---|--- 2026-07-01 15:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplurpetfu26 2026-07-02 02:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmzkujtyx27 2026-07-02 04:35:02+00:00| seen|...

CVE-2026-46227

creationtimestamp| type| source ---|---|--- 2026-07-01 15:21:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsz4acbv2o 2026-07-02 07:15:17+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:22:09+00:00|...

CVE-2026-46189

creationtimestamp| type| source ---|---|--- 2026-07-01 15:20:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsyenkni2h 2026-07-02 07:15:15+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:21:18+00:00|...

CVE-2026-58029

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php,...

CVE-2026-45292

creationtimestamp| type| source ---|---|--- 2026-07-01 15:16:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplspxj3ro22...

acl: TOCTOU Symlink Traversal via getfacl/setfacl

A time-of-check to time-of-use TOCTOU race condition vulnerability was found in acl. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes...

CVE-2026-58127

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET...