CVE-2025-60483

creationtimestamp| type| source ---|---|--- 2026-06-01 22:27:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnb4tgjcvl2a...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-45285

A flaw was found in Nextcloud. When a user shares a folder or file with a Nextcloud Team that includes an external member, the system automatically generates a public link for that external member. This link, which is not visible to the folder owner, grants the same permissions as the Team's...

CVE-2026-45281

A flaw was found in Nextcloud Server. An authenticated user, with knowledge of another user's principal URL, could exploit improper authorization controls to gain full access to that user's calendar. This allows the attacker to view and modify the victim's calendar, leading to unauthorized...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0087

CVE-2026-0087 : The connected sources identify a logic error in Android’s DomainVerificationService.java (approvalLevelForDomainInternal) that could allow hijacking an arbitrary app link, enabling local privilege escalation without user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-10289

creationtimestamp| type| source ---|---|--- 2026-06-01 21:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnayqj54cb2n...

CVE-2026-45545

creationtimestamp| type| source ---|---|--- 2026-06-01 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnay6m25l42w 2026-06-05 03:08:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnj5uepyuj2f...

CVE-2026-45727

creationtimestamp| type| source ---|---|--- 2026-06-01 20:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnaxvnkvb32z...

CVE-2026-45729

creationtimestamp| type| source ---|---|--- 2026-06-01 20:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnax3vobbu2z 2026-07-22 17:00:04+00:00| seen| Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00 2026-07-23 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-10286

creationtimestamp| type| source ---|---|--- 2026-06-01 20:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnawsjmsdr26...

CVE-2026-8206

creationtimestamp| type| source ---|---|--- 2026-06-01 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86883 2026-06-01 23:00:14+00:00| seen| Telegram/WmCsGmCxw3llm8l2PpPL4TbSd7NmUffJbXR2OZgq87qhTE 2026-06-02 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnbr4mqu6h2j...

CVE-2026-9319

creationtimestamp| type| source ---|---|--- 2026-06-01 19:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatk6z5aa2k 2026-06-12 12:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27 2026-06-16 19:25:04+00:00| seen|...

CVE-2026-8644

creationtimestamp| type| source ---|---|--- 2026-06-01 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat7wh7co2w 2026-06-04 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mni7os6qr22z 2026-06-04 20:25:05+00:00| seen|...

CVE-2026-45132

creationtimestamp| type| source ---|---|--- 2026-06-01 19:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnasjc2rg427 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen|...

CVE-2026-45285

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member a person added via email address who does not have a Nextcloud account, the...

CVE-2026-45282

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can access attachments of link shares when knowing the share token, circumventing password protection or download...

CVE-2026-25276

creationtimestamp| type| source ---|---|--- 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-02 01:32:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116677923791061052 2026-06-02 17:37:06+00:00| seen|...