65271 matches found
CVE-2026-12045
creationtimestamp| type| source ---|---|--- 2026-06-19 03:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momhb5foco2g 2026-06-22 11:31:38+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moury636wf2b 2026-06-23 10:07:30+00:00| seen|...
GHSA-G7M4-839X-CH6V
creationtimestamp| type| source ---|---|--- 2026-06-19 03:11:39+00:00| seen| https://gist.github.com/alon710/9444ec80b5b6b03e92361b8cc9ab95ef...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
GHSA-6VVH-PXR4-25R7
creationtimestamp| type| source ---|---|--- 2026-06-19 01:41:43+00:00| seen| https://gist.github.com/alon710/f3e92e03dae92147bc7c79e5359c6c2b 2026-06-19 01:51:20+00:00| seen| https://gist.github.com/alon710/b1b22df575bfbbf1e201aedc3467bcba...
CVE-2026-10746
creationtimestamp| type| source ---|---|--- 2026-06-19 01:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom7htenzk2x...
GHSA-3PRJ-6HQW-CM82
creationtimestamp| type| source ---|---|--- 2026-06-19 01:11:33+00:00| seen| https://gist.github.com/alon710/ffff1d4eb6033a732c872d3aa4694b89...
PT-2026-51095
Name of the Vulnerable Software and Affected Versions miniflux-v2 affected versions not specified Description URL restrictions can be bypassed, leading to an open redirect. The application uses the IsRelativePath function to validate redirect URLs by requiring relative paths and prohibiting host ...
PT-2026-51047
Name of the Vulnerable Software and Affected Versions py7zr version 1.1.0 Description An arbitrary file write issue exists when using the extractall function to extract an archive. The software fails to properly restrict the targets of symbolic links, allowing crafted malicious symbolic link chai...
Dell iDRAC Tools < 11.4.1.0 Improper Link Resolution (DSA-2026-239)
According to its self-reported version, the Dell iDRAC Tools installation on the remote host is affected by a link following vulnerability. Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attack...
CVE-2026-9692
creationtimestamp| type| source ---|---|--- 2026-06-18 23:05:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3molwvis6v62q...
CVE-2026-45696
creationtimestamp| type| source ---|---|--- 2026-06-18 21:53:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molsuubd7i2r...
GHSA-G7M4-839X-CH6V spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation
Summary The digits parameter parsed from a provisioning URI is validated only with a lower bound $value 0 and has no upper bound src/OTP.php:353-357. OTP generation computes $code % 10 $this-getDigits src/OTP.php:283. When digits is large enough that 10 digits overflows PHP's integer range and th...
CVE-2026-12407
creationtimestamp| type| source ---|---|--- 2026-06-18 20:37:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3molonccrzh25...
CVE-2025-15661 libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c
libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose heap memory contents or cause a crash by sending a crafted SSHFXPNAME response...
CVE-2026-25865
Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.dll ControlRunDLL input.dll. Attacker...
EUVD-2026-37940
Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.dll ControlRunDLL input.dll. Attacker...
CVE-2026-25865
CVE-2026-25865 affects Punto Switcher 4.5.0.583. The vulnerability is an unquoted search path element invoked via WinExec when calling RunDll32.exe for shell32.dll Control_RunDLL input.dll, enabling local arbitrary code execution if an attacker places a malicious executable earlier in the search ...
CVE-2025-32437
creationtimestamp| type| source ---|---|--- 2026-06-18 18:36:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molhuccpkl2s...