CVE-2026-44230

RT (Request Tracker) contains a reflected Cross‑Site Scripting (XSS) vulnerability in search results/chart rendering. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 are affected if an authenticated user is induced to visit a crafted URL, enabling arbitrary ...

CVE-2026-44230 RT: Reflected Cross-Site Scripting in search results chart

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

CVE-2026-57366

creationtimestamp| type| source ---|---|--- 2026-07-20 18:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3x7e2xlx2e 2026-07-21 04:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4yq7e34e2o 2026-07-21 14:44:09+00:00| seen|...

CVE-2026-64206

creationtimestamp| type| source ---|---|--- 2026-07-20 18:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wqxhaly27 2026-08-06 04:47:51+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen...

GHSA-42H9-826W-CGV3

creationtimestamp| type| source ---|---|--- 2026-07-20 18:32:13+00:00| seen| https://gist.github.com/alon710/cdf2a5ef96b6a707eafe65a3f00899a3 2026-07-21 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6g7tzv2g 2026-08-12 12:01:30+00:00| seen|...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2026-64191

creationtimestamp| type| source ---|---|--- 2026-07-20 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wixt7wk2i 2026-08-06 04:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen...

CVE-2026-62183

creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r 2026-07-21 15:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j 2026-07-22 17:00:05+00:00| seen|...

CVE-2026-46410

creationtimestamp| type| source ---|---|--- 2026-07-20 18:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vcmpphg2a...

CVE-2026-35048

creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...

CVE-2026-57308

creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...

CVE-2026-8170 ExtremeXOS Privilege Escalation via Symlink Following in File Utilities

The mv, cp, and rm file utilities exposed within the ExtremeXOS EXOS shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic link that references a privileged filesyst...

CVE-2026-39385

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course...

CVE-2026-35198

creationtimestamp| type| source ---|---|--- 2026-07-20 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qincwha2e 2026-07-20 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rids62y2q 2026-07-20 17:40:41+00:00| seen|...

CVE-2026-16252

creationtimestamp| type| source ---|---|--- 2026-07-20 16:43:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qhrgx4y2p...

CVE-2026-46428

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf3yend2i 2026-07-20 18:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3uqph73s2o 2026-07-28 16:35:09+00:00| published-proof-of-concept|...

CVE-2026-58414 Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...

CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

CVE-2026-32807

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

Malicious Package

Overview Skylark.Net is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...