75470 matches found
PT-2026-65967
Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability...
(Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware update process. By creating a symbolic link, an...
ROS-20260729-73-0017
The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-18197: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
PT-2026-65835
AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...
drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c
The vulnerability of the dpretrainlinkdptest function in the drivers/gpu/drm/amd/display/dc/link/accessories/linkdpcts.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability...
PT-2026-65692
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...
PT-2026-65716
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
Fedora 43 : kronosnet (2026-56568b6fe8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
CVE-2026-14958
creationtimestamp| type| source ---|---|--- 2026-07-28 23:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i 2026-07-28 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23...
CVE-2026-15064
creationtimestamp| type| source ---|---|--- 2026-07-28 23:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkmgz42s2j 2026-07-30 04:48:01+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...
CVE-2026-15325
creationtimestamp| type| source ---|---|--- 2026-07-28 22:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqitavyqz22 2026-07-29 15:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs7fjz6hb27 2026-07-30 04:47:05+00:00| seen|...
CVE-2026-55390
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:32+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g 2026-07-28 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q...
CVE-2026-54719
creationtimestamp| type| source ---|---|--- 2026-07-28 22:30:56+00:00| seen| https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4 2026-07-28 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh 2026-07-29 00:00:29+00:0...
GHSA-6XX4-9WP6-65P7 skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Impact skilo add installs a skill by recursively copying the skill directory into the target skills directory. The copy routine copydirall classified each entry with std::fs::DirEntry::filetype — which does not follow symlinks — and then copied non-directory entries with std::fs::copy, which does...
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Impact skilo add installs a skill by recursively copying the skill directory into the target skills directory. The copy routine copydirall classified each entry with std::fs::DirEntry::filetype — which does not follow symlinks — and then copied non-directory entries with std::fs::copy, which does...
GHSA-PP92-CRG2-GFV9
creationtimestamp| type| source ---|---|--- 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...
CVE-2026-56722
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...