dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

USN-8420-1 dotnet8, dotnet9, dotnet10 vulnerabilities

It was discovered that .NET did not properly handle link resolution before file access. A local attacker could use this issue to perform unauthorized file tampering and write arbitrary files outside of the intended extraction directory. CVE-2026-45491 It was discovered that .NET did not properly...

CVE-2026-46520

creationtimestamp| type| source ---|---|--- 2026-06-11 05:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnygzyjcyh2n...

CVE-2026-28742

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-02 2026-06-11 16:15:41+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmpx4uza2v 2026-06-12 21:32:56+00:00| seen|...

CVE-2026-7368

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-01 2026-06-11 16:13:04+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmlcnxbg2f 2026-06-12 16:00:57+00:00| seen|...

CVE-2026-10557

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-01 2026-06-11 16:13:04+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmlcnxbg2f 2026-06-14 12:00:22+00:00| seen|...

CVE-2026-46546

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially crafted content in certain user-editable fields that, when surfaced in page metadata, caused visitors' browsers to navigate to...

CVE-2026-47712

creationtimestamp| type| source ---|---|--- 2026-06-11 02:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny74lz6422c...

CVE-2026-47165

creationtimestamp| type| source ---|---|--- 2026-06-11 02:29:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny6koag3r2d...

CVE-2026-47166

creationtimestamp| type| source ---|---|--- 2026-06-11 02:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny6bpfzzb2h...

CVE-2026-48724

creationtimestamp| type| source ---|---|--- 2026-06-11 02:14:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny5psjwgv2x...

CVE-2026-53462

creationtimestamp| type| source ---|---|--- 2026-06-11 02:06:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny5bfxp7c2v 2026-06-26 16:42:20+00:00| seen| https://gist.github.com/alon710/8649cee74b41dfbab6352036ad771ea3 2026-06-26 16:52:45+00:00| seen|...

CVE-2026-48733

creationtimestamp| type| source ---|---|--- 2026-06-11 02:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny53gqirf2r...

CVE-2026-53463

creationtimestamp| type| source ---|---|--- 2026-06-11 01:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny4mkx4xn2i...

CVE-2026-53465

creationtimestamp| type| source ---|---|--- 2026-06-11 01:31:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny3cs73jy2l...

CVE-2026-46654

creationtimestamp| type| source ---|---|--- 2026-06-11 00:37:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxycx4cfw2c...

CVE-2026-10142

creationtimestamp| type| source ---|---|--- 2026-06-11 00:36:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxyb5brp52c 2026-06-11 07:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnynpub7wl2g...

EUVD-2026-36142

Simple Link Directory through 9.0.4 interpolates the sldnoresultsfound option into a JavaScript string literal without encoding. Because sanitizetextfield leaves quotes intact, a stored payload breaks out of the string and runs script for every page visitor...