CVE-2026-12322

creationtimestamp| type| source ---|---|--- 2026-06-16 14:01:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxlhe4jd2x 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-12329

creationtimestamp| type| source ---|---|--- 2026-06-16 14:00:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxilvz4i2i 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-53899

creationtimestamp| type| source ---|---|--- 2026-06-16 13:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxfuqupl2j 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL

Summary did not validate the URL scheme of values bound to its to or href props before rendering them into the href attribute of the underlying element. When an application binds attacker-controlled input a query parameter, a CMS field, a user-supplied profile URL to or :href, the attacker can...

GHSA-934W-87QH-QR26 Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URL

Summary did not validate the URL scheme of values bound to its to or href props before rendering them into the href attribute of the underlying element. When an application binds attacker-controlled input a query parameter, a CMS field, a user-supplied profile URL to or :href, the attacker can...

CVE-2026-12225

creationtimestamp| type| source ---|---|--- 2026-06-16 13:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofvwytyu62f 2026-06-22 03:03:17+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3motvk57rgk2h...

CVE-2026-10640

Summary: Zephyr’s IPv6 Neighbor Discovery send paths (ipv6_nbr.c) perform a use-after-free by reading iface from a freed net_pkt slab block when updating per-interface ICMP statistics, after the packet has been sent. This can corrupt iface-stats.icmp.sent or cause a crash/DoS if the slab memory i...

CVE-2026-50203

creationtimestamp| type| source ---|---|--- 2026-06-16 13:27:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mofvnbvfs42g 2026-06-17 06:32:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohoxaa3322z 2026-06-18 14:07:08+00:00| seen|...

CVE-2026-10852

creationtimestamp| type| source ---|---|--- 2026-06-16 12:50:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3moftkwzfkl2p...

CVE-2026-39490

creationtimestamp| type| source ---|---|--- 2026-06-16 11:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnj7cep524...

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

The North Korean state-sponsored hacking group known as ScarCruft aka APT37 has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver a new malware called NarwhalRAT. "The attack email contained a message impersonating an MS account security...

D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin

cve-id ⚡ Simple Usage Use this project only in safe and...

CVE-2001-0731

creationtimestamp| type| source ---|---|--- 2026-06-16 06:00:26+00:00| seen| https://gist.github.com/magajay4life-pixel/f7260a84b8e6d9a00baa0febf00bfd83...

CVE-2026-53821

creationtimestamp| type| source ---|---|--- 2026-06-16 05:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moezp3vgcp2a...

CVE-2026-0647

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-05 2026-06-16 16:12:33+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mog6uxnajr2d 2026-06-16 17:31:41+00:00| seen|...

CVE-2026-53831

creationtimestamp| type| source ---|---|--- 2026-06-16 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moepnadglh2s...

GHSA-MF5C-HW34-4HPP

creationtimestamp| type| source ---|---|--- 2026-06-16 01:24:07+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3moenadkbis2e...

CVE-2026-53430

creationtimestamp| type| source ---|---|--- 2026-06-16 00:38:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moekog4et52f...

PT-2026-50077

Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension Chrome versions prior to 26.5.2.3 Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS Universal Cross-Site Scripting is a type of...