65297 matches found
RockyLinux 8 : .NET 8.0 (RLSA-2026:25110)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:25110 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
PT-2026-48941
Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 11.6.2 Mattermost versions prior to 11.5.5 Mattermost versions prior to 10.11.17 Description Insufficient role-management authorization occurs when setting the scheme admin flag on group syncable link and patch...
Security Update for Microsoft .NET Core (June 2026)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Improper authorization in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-45490 - Improp...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : .NET vulnerabilities (USN-8420-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8420-1 advisory. It was discovered that .NET did not properly handle link resolution before file access. A local attacker could use this...
PT-2026-49069
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.6 Description A low-privileged authenticated user with create and delete permissions in their own isolated scope can delete share-link records belonging to any other user, including the administrator. This...
RockyLinux 8 : .NET 9.0 (RLSA-2026:25113)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:25113 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...
Python 3.10.x / 3.11.x / 3.12.x / 3.13.x < 3.13.14 / 3.14.x < 3.14.6 Path Traversal
The version of Python installed on the remote Windows host is affected by a path traversal vulnerability. tarfile.datafilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...
PT-2026-48818
The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link url' parameter of the presto player overlay shortcode in versions up to, and including, 4.2.0 This is due to insufficient input sanitization and output escaping in the getOverlays function, which...
PT-2026-48864
MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an...
CVE-2026-53816
creationtimestamp| type| source ---|---|--- 2026-06-11 22:07:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2afnrmep23...
CVE-2026-53813
creationtimestamp| type| source ---|---|--- 2026-06-11 22:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2a5n7kl72o 2026-06-14 15:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moazw5uzcb2a...
CVE-2026-46622
creationtimestamp| type| source ---|---|--- 2026-06-11 21:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo26xyzixc2d 2026-06-15 01:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3io7van2x...
CVE-2026-6250 Authenticated Format String Injection on TP-Link Tapo C110
An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input. Externally controlled data is interpreted as a format string, which can be used to manipulate stack memory, including control flow data such as return...
CVE-2026-53782
Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying...
EUVD-2026-36308
Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying...
CVE-2026-53781 Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers, chunked transfer encoding, or failed HEAD requests...
CVE-2026-50633
creationtimestamp| type| source ---|---|--- 2026-06-11 19:04:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzw4xdw6y2h 2026-06-14 12:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moapulsnzq2a 2026-07-07 12:21:32+00:00| seen|...
Exploit for Command Injection in Tp-Link Tapo_C200_Firmware
🔍 CVE-2021-4045: Vulnerabilidad de Inyección de Comandos en...
CVE-2026-12029
creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrlmr5g2p 2026-06-12 05:25:16+00:00|...