CVE-2026-51244

creationtimestamp| type| source ---|---|--- 2026-07-29 20:02:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrsprhjqnh2p...

CVE-2026-67436 Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...

CVE-2026-13268 G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

EUVD-2026-50490

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

CVE-2026-54727

creationtimestamp| type| source ---|---|--- 2026-07-29 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b 2026-07-29 18:35:08+00:00| published-proof-of-concept| https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f 2026-07-30 00:32:17+00:0...

GHSA-JQ8W-8Q2F-FFM9

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c...

UNIX Symbolic Link (Symlink) Following

Overview proot-distro is a PRoot-Distro is a lightweight rootless Linux container management utility built around proot. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the prootdistro/commands/install.py function and the equivalent process in...

GHSA-4P3G-4HCJ-WPVX

creationtimestamp| type| source ---|---|--- 2026-07-29 16:32:11+00:00| seen| https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-65888

creationtimestamp| type| source ---|---|--- 2026-07-29 15:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbha6yr42v 2026-07-29 18:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiy5n5mo24 2026-08-06 03:07:07+00:00| seen|...

CVE-2026-12927

creationtimestamp| type| source ---|---|--- 2026-07-29 15:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsbdllct22j...

CVE-2026-65886

creationtimestamp| type| source ---|---|--- 2026-07-29 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbdnfbk224 2026-07-29 17:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsindtlqe2q 2026-08-06 07:37:07+00:00| seen|...

CVE-2026-60113 AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113

AMMOS Instrument Toolkit (AIT) DSN Interface before 2.2.2 has a missing authentication vulnerability in the Space Link Extension (SLE) interface manager. Unauthenticated network attackers can reach seven unprotected API routes via direct HTTP requests, enabling actions such as starting/stopping D...

CVE-2026-60113 AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...