gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...

CVE-2026-10562 Unauthenticated Open Redirect Vulnerability on TP-Link Archer AX20 Web Interface

An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...

CVE-2026-58375

creationtimestamp| type| source ---|---|--- 2026-06-30 18:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjnp7uyku23...

CVE-2026-58372

creationtimestamp| type| source ---|---|--- 2026-06-30 18:25:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmudi45y2u 2026-07-02 05:56:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndwv4afe2t...

CVE-2026-8864

creationtimestamp| type| source ---|---|--- 2026-06-30 18:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm2lvbnn2u...

CVE-2026-10654

creationtimestamp| type| source ---|---|--- 2026-06-30 18:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p...

CVE-2025-23350

creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-02 02:18:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxplqz6q2b 2026-07-02 08:11:34+00:00| seen|...

CVE-2026-48307

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2026-57082

creationtimestamp| type| source ---|---|--- 2026-06-30 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjezu3btb2s...

CVE-2026-48307 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2026-48307

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2026-13135

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpjajjku442c 2026-07-01 02:50:45+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0819...

CVE-2026-10817

creationtimestamp| type| source ---|---|--- 2026-06-30 14:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7yqkhca2m 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58016

creationtimestamp| type| source ---|---|--- 2026-06-30 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7gtiwvm2t 2026-07-02 05:19:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnbtzxrwh2k 2026-07-21 12:01:08+00:00| seen|...

CVE-2026-58012

creationtimestamp| type| source ---|---|--- 2026-06-30 14:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj775x7sw2v 2026-07-21 12:00:56+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5bj5er2t 2026-07-29 12:01:35+00:00| seen|...

CVE-2017-7876

creationtimestamp| type| source ---|---|--- 2026-06-30 14:18:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78f5676b-e9fb-4677-aaf3-240da91541ff...

WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Simple Link Directory versions = 15.0.5...

CVE-2026-14161

creationtimestamp| type| source ---|---|--- 2026-06-30 14:12:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6oxbel72t 2026-07-01 02:34:08+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...

CVE-2026-58116

creationtimestamp| type| source ---|---|--- 2026-06-30 14:11:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6n3wm232o 2026-07-02 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpn5sja33323 2026-07-05 14:37:40+00:00| seen|...

CVE-2026-53433

creationtimestamp| type| source ---|---|--- 2026-06-30 14:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6i7jyks2z 2026-07-01 02:37:36+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53432 2026-07-03 12:15:16+00:00| seen|...