PT-2026-51371

Name of the Vulnerable Software and Affected Versions TP-Link routers affected versions not specified Description Insufficient validation of externally supplied DHCP option data in the DHCP option processing logic allows an adjacent, unauthenticated attacker to execute arbitrary commands with...

GHSA-MH64-PH39-MRC9

creationtimestamp| type| source ---|---|--- 2026-06-21 20:11:16+00:00| seen| https://gist.github.com/alon710/c5b3f5c6eff1ab2b8225ee8d2a46e1e8...

CVE-2026-56404

creationtimestamp| type| source ---|---|--- 2026-06-21 18:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosypq3crw22 2026-06-26 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncaeykp26...

CVE-2026-56410

creationtimestamp| type| source ---|---|--- 2026-06-21 17:52:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moswsrivk52n 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...

CVE-2026-56384

Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user without permission to view a target private asset can call the endpoint with an attacker-controlled assetId and receive preview HTML containing a signed fallback transform preview...

CVE-2026-49287

creationtimestamp| type| source ---|---|--- 2026-06-21 14:02:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mosjwafv3w2c...

CVE-2026-12796

creationtimestamp| type| source ---|---|--- 2026-06-21 14:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosjszfxgj2c...

CVE-2026-56384

Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user without permission to view a target private asset can call the endpoint with an attacker-controlled assetId and receive preview HTML containing a signed fallback transform preview...

CVE-2026-12778

creationtimestamp| type| source ---|---|--- 2026-06-21 08:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morwedwvx32x 2026-06-22 12:39:57+00:00| seen| https://www.acn.gov.it/portale/w/aomei-disponibili-poc-pubblici-per-le-cve-2026-12778-cve-2026-12779-e-cve-2026-12780...

CVE-2026-12770

creationtimestamp| type| source ---|---|--- 2026-06-21 03:59:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morib5g34w2r...

PT-2026-51268

In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...

CVE-2026-56347

creationtimestamp| type| source ---|---|--- 2026-06-20 20:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqqmlymxy2i...

CVE-2026-56347

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site...

CVE-2026-54665

creationtimestamp| type| source ---|---|--- 2026-06-20 17:50:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moqg7lyhop2q 2026-06-22 12:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouuauis2z25...

CVE-2026-44911

creationtimestamp| type| source ---|---|--- 2026-06-20 17:45:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moqfwnlakf2t 2026-06-22 12:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutshvmqm25...

CVE-2026-46488

creationtimestamp| type| source ---|---|--- 2026-06-20 16:48:06+00:00| published-proof-of-concept| https://github.com/motioneye-project/motioneye/security/advisories/GHSA-r3cw-c95m-wfh9...

CVE-2026-12673

creationtimestamp| type| source ---|---|--- 2026-06-20 16:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqatxx4eb2i...

CVE-2022-50972

creationtimestamp| type| source ---|---|--- 2026-06-20 16:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqac2ykyy2j 2026-07-17 23:35:04+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mquw2r6h3s2s...

CVE-2026-56317

creationtimestamp| type| source ---|---|--- 2026-06-20 15:50:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moq7iigjpi2e...

CVE-2026-56332 Capgo - Open Redirect via confirmation_url Parameter

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmationurl parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting...