75262 matches found
CVE-2026-54917
creationtimestamp| type| source ---|---|--- 2026-08-05 03:00:05+00:00| seen| https://t.me/GithubRedTeam/96685 2026-08-05 21:00:04+00:00| seen| Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU 2026-08-06 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-18897
creationtimestamp| type| source ---|---|--- 2026-08-05 02:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hs53hje7zja5s 2026-08-05 06:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msctz2eaua2z 2026-08-05 06:00:47+00:00| seen|...
CVE-2026-18895
creationtimestamp| type| source ---|---|--- 2026-08-05 02:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/45dep7prj4syb 2026-08-05 06:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msctytum472p...
GHSA-7MPP-R37J-X5WH
creationtimestamp| type| source ---|---|--- 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...
PT-2026-72112
Name of the Vulnerable Software and Affected Versions PAX Technology Q80 affected versions not specified Description A flaw in the parsing of AIP files allows network-adjacent attackers to execute arbitrary code without authentication. By creating a symbolic link, an attacker can abuse the...
CVE-2026-5062: Improper Neutralization of Special Elements used in an SQL Command
The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via the 's' search parameter on the Pretty Links listing page in all versions up to, and including, 3.6.20. This is due to insufficient escapin...
CVE-2026-20310: Improper Link Resolution Before File Access
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-12410: Improper Link Resolution Before File Access
Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's dat...
PT-2026-68248
Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description An issue exists involving improper link resolution before file access. This occurs when the system does not properly validate symbolic links or shortcuts before accessing the...
PT-2026-68251
Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN affected versions not specified Description An issue exists involving improper link resolution before file access. This occurs when the system does not correctly validate symbolic links or shortcuts before accessing the...
CVE-2026-9273: Weak Password Recovery Mechanism for Forgotten Password
The Membership Plugin – Kadence Memberships plugin for WordPress formerly Restrict Content is vulnerable to password reset link poisoning leading to account takeover in all versions up to, and including, 4.0.0. This is due to the legacy lost-password handler rcprocesslostpasswordform consuming th...
CVE-2026-20313: Improper Validation of Specified Quantity in Input
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
(0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of AIP files. By creating a symbolic link, an attacker can abus...
CVE-2026-67620
creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:02+00:00| seen| https://t.me/GithubRedTeam/96659 2026-08-05 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96659 2026-08-05 05:00:10+00:00| seen| Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc 2026-08-0...
CVE-2026-18817
creationtimestamp| type| source ---|---|--- 2026-08-04 22:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2e6gnr3bwti6t...
CVE-2026-45103
creationtimestamp| type| source ---|---|--- 2026-08-04 22:42:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cj3oi2zohhnby...
CVE-2026-70594
creationtimestamp| type| source ---|---|--- 2026-08-04 22:36:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6f6e3y6mttsbe 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...
CVE-2026-59817
creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...