CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-41991

A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...

CVE-2026-11720

creationtimestamp| type| source ---|---|--- 2026-06-29 18:44:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5g46kci2e 2026-06-29 22:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphikpwkbb2m 2026-07-02 04:37:07+00:00| seen|...

CVE-2026-57951

creationtimestamp| type| source ---|---|--- 2026-06-29 18:42:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ckshvh2o 2026-06-29 21:17:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfyab5j72k...

CVE-2025-70099

creationtimestamp| type| source ---|---|--- 2026-06-29 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mph537qtgs2y...

CVE-2026-56782

creationtimestamp| type| source ---|---|--- 2026-06-29 18:34:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4uzdfuk25 2026-06-29 22:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphkmtrak22m 2026-07-01 12:00:04+00:00| confirmed|...

CVE-2026-35062

creationtimestamp| type| source ---|---|--- 2026-06-29 18:21:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph45axirc25...

CVE-2026-34176

creationtimestamp| type| source ---|---|--- 2026-06-29 18:20:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph44fchn42b...

CVE-2026-54826

creationtimestamp| type| source ---|---|--- 2026-06-29 18:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mph3tveglw2i...

CVE-2026-12912

creationtimestamp| type| source ---|---|--- 2026-06-29 17:51:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2hxypn322 2026-06-29 20:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphcssleox2p 2026-07-03 17:50:34+00:00| seen|...

CVE-2026-13588

creationtimestamp| type| source ---|---|--- 2026-06-29 17:50:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2fqub6f2o 2026-06-29 20:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphbsix7rl2h 2026-06-29 20:38:53+00:00| seen|...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-20111

creationtimestamp| type| source ---|---|--- 2026-06-29 17:34:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgziwljxm2d...

CVE-2026-13742

creationtimestamp| type| source ---|---|--- 2026-06-29 17:30:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzbnnu4y2y 2026-06-29 20:44:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphe4lltgz2b...

CVE-2026-13583

creationtimestamp| type| source ---|---|--- 2026-06-29 17:00:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxltt3i723 2026-06-29 20:30:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphddjufj62e 2026-06-29 22:11:11+00:00| seen|...

GHSA-37R3-Q4CW-F7GQ

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/37b525da8fcc1cc9bd9ee5e50b75f2b2...

GHSA-FQGM-2X23-C4XM

creationtimestamp| type| source ---|---|--- 2026-06-29 16:59:42+00:00| seen| https://gist.github.com/CyberKareem/a5884cfd6ce864e0c126d4ad2a0c689c...

CVE-2026-9105

creationtimestamp| type| source ---|---|--- 2026-06-29 16:58:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxjndka52y 2026-06-29 17:52:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2k7spaz2n 2026-06-29 19:59:22+00:00| seen|...

CVE-2026-13746

creationtimestamp| type| source ---|---|--- 2026-06-29 16:56:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxflto7g23...

CVE-2026-9105

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process...