GHSA-GHMH-JHMJ-WCMF

creationtimestamp| type| source ---|---|--- 2026-06-23 08:41:51+00:00| seen| https://gist.github.com/alon710/36f3399c6d42cf95c9294583be143e55...

CVE-2026-4102

creationtimestamp| type| source ---|---|--- 2026-06-23 08:23:37+00:00| seen| https://gist.github.com/zanetworker/1c2f8d6638917ee25ed7da3865900455...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

CVE-2026-28496

creationtimestamp| type| source ---|---|--- 2026-06-23 07:40:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-28496.yaml 2026-06-23 16:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxs32hcvd2w 2026-06-23...

Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

MGASA-2026-0227 Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

CVE-2026-8172

The CVE-2026-8172 entry concerns the WordPress plugin Simple Basic Contact Form (through 20250114). The issue is a Reflected Cross-Site Scripting vulnerability caused by not escaping user-supplied input before reflecting it in the contact form output on validation errors. Impact described: unauth...

EUVD-2026-38418

The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cross-Site Scripting vulnerability that unauthenticated attackers can exploit against site visitors vi...

CVE-2026-48167

creationtimestamp| type| source ---|---|--- 2026-06-23 01:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow75wphmt2e 2026-06-24 07:11:47+00:00| seen| https://gist.github.com/alon710/ef60a8d2e003433e0632a30f0def6b96...

CVE-2026-48505

creationtimestamp| type| source ---|---|--- 2026-06-23 00:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6lzrmz42a...

CVE-2026-48509

creationtimestamp| type| source ---|---|--- 2026-06-23 00:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow65lsemi23...

CVE-2026-54235

creationtimestamp| type| source ---|---|--- 2026-06-23 00:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523...

CVE-2026-48067

creationtimestamp| type| source ---|---|--- 2026-06-23 00:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow55cb5tf2k...

CVE-2026-48510

creationtimestamp| type| source ---|---|--- 2026-06-23 00:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4treusj2o...

PT-2026-51646

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.1 Description In S3-backed deployments, the system fails to perform authorization checks before generating temporary URLs for signature image retrieval. Authenticated users who possess a signature filename can...

PT-2026-51629

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description An issue exists in the Repository.UploadRepoFiles function where symlink checks are performed only on the leaf of the upload target using osx.IsSymlinktargetPath, unlike other functions that validate...

CVE-2026-39253

CVE-2026-39253 affects Pivotal CRM v6.6.04.08. The vulnerability enables a remote attacker to execute arbitrary code via the components Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll , caused by insecure deserialization (CWE-502). The CVSSv3.1 base score is 8.1 (HIGH) w...

Automated Logic WebCTRL Premium Server URL Redirection to Untrusted Site (CVE-2024-8527)

CWE-601 URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists in Automated Logic WebCTRL and Carrier i-Vu Building Automation System products. The application accepts a user-supplied URL and redirects without proper validation, allowing attackers to exploit user sessions through ...

CVE-2026-54268

creationtimestamp| type| source ---|---|--- 2026-06-22 23:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow3ikyahx2q 2026-07-20 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2vbuzolw2v...

CVE-2026-50556

creationtimestamp| type| source ---|---|--- 2026-06-22 23:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzuf2ets2s 2026-07-04 04:07:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6rfuwao2b 2026-07-13 08:07:07+00:00| seen|...