75472 matches found
CVE-2026-13268: Improper Link Resolution Before File Access
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
PT-2026-65967
Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability...
Fedora 43 : kronosnet (2026-56568b6fe8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
(Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware update process. By creating a symbolic link, an...
CVE-2026-18197: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
PT-2026-65835
AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...
drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c
The vulnerability of the dpretrainlinkdptest function in the drivers/gpu/drm/amd/display/dc/link/accessories/linkdpcts.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability...
PT-2026-65692
The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribute of author-supplied link markup as a lightbox caption that is written into the page DOM without escaping. Because the title attribute survives the post-content sanitization applied to users who lack the unfiltered html...
PT-2026-65716
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
ROS-20260729-73-0017
The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-65678
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the post thumbnail and newsletters post thumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the post...
CVE-2026-14958
creationtimestamp| type| source ---|---|--- 2026-07-28 23:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i 2026-07-28 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23...
CVE-2026-15064
creationtimestamp| type| source ---|---|--- 2026-07-28 23:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqkmgz42s2j 2026-07-30 04:48:01+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...
CVE-2026-15325
creationtimestamp| type| source ---|---|--- 2026-07-28 22:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqitavyqz22 2026-07-29 15:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrs7fjz6hb27 2026-07-30 04:47:05+00:00| seen|...
CVE-2026-55390
creationtimestamp| type| source ---|---|--- 2026-07-28 22:35:32+00:00| published-proof-of-concept| https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-442q-2j6p-642g 2026-07-28 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjc3tw4s2q...
CVE-2026-54719
creationtimestamp| type| source ---|---|--- 2026-07-28 22:30:56+00:00| seen| https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4 2026-07-28 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh 2026-07-29 00:00:29+00:0...
GHSA-6XX4-9WP6-65P7 skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Impact skilo add installs a skill by recursively copying the skill directory into the target skills directory. The copy routine copydirall classified each entry with std::fs::DirEntry::filetype — which does not follow symlinks — and then copied non-directory entries with std::fs::copy, which does...
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
Impact skilo add installs a skill by recursively copying the skill directory into the target skills directory. The copy routine copydirall classified each entry with std::fs::DirEntry::filetype — which does not follow symlinks — and then copied non-directory entries with std::fs::copy, which does...
GHSA-PP92-CRG2-GFV9
creationtimestamp| type| source ---|---|--- 2026-07-28 20:31:48+00:00| seen| https://gist.github.com/alon710/76a4f64bf3e94be3974678cdc55c68d9...
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...