golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-15157

creationtimestamp| type| source ---|---|--- 2026-07-29 21:20:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c 2026-08-04 11:32:23+00:00| seen| https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f 2026-08-04 12:00:59+00:00| seen|...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-14643

creationtimestamp| type| source ---|---|--- 2026-07-29 21:11:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrstmoc6mc2c 2026-08-04 12:31:53+00:00| seen| https://gist.github.com/alon710/dbd628dcf4d2ee2986aea22ad7d6f2b4...

CVE-2026-6336

creationtimestamp| type| source ---|---|--- 2026-07-29 21:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrst3p5lsr2e 2026-07-30 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...

GHSA-FQ3F-M5QM-99F5

creationtimestamp| type| source ---|---|--- 2026-07-29 20:31:26+00:00| seen| https://gist.github.com/alon710/e40fc20ed683aaeeae74fc5b1a713445...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-21123

creationtimestamp| type| source ---|---|--- 2026-07-29 20:11:56+00:00| seen| https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e...

CVE-2026-51244

creationtimestamp| type| source ---|---|--- 2026-07-29 20:02:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrsprhjqnh2p...

EUVD-2026-50490

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

CVE-2026-54727

creationtimestamp| type| source ---|---|--- 2026-07-29 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b 2026-07-29 18:35:08+00:00| published-proof-of-concept| https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f 2026-07-30 00:32:17+00:0...

GHSA-JQ8W-8Q2F-FFM9

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c...

GHSA-4P3G-4HCJ-WPVX

creationtimestamp| type| source ---|---|--- 2026-07-29 16:32:11+00:00| seen| https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-65888

creationtimestamp| type| source ---|---|--- 2026-07-29 15:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbha6yr42v 2026-07-29 18:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiy5n5mo24 2026-08-06 03:07:07+00:00| seen|...

CVE-2026-12927

creationtimestamp| type| source ---|---|--- 2026-07-29 15:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsbdllct22j...

CVE-2026-65886

creationtimestamp| type| source ---|---|--- 2026-07-29 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbdnfbk224 2026-07-29 17:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsindtlqe2q 2026-08-06 07:37:07+00:00| seen|...