CVE-2026-59674

creationtimestamp| type| source ---|---|--- 2026-07-20 04:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2i3rtydj24...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2026-24252

creationtimestamp| type| source ---|---|--- 2026-07-20 04:27:04+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2hcpkycs2z...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

Malicious Package

Overview @gocortexio/npmgremlinbox-cc-by-sa-2-0-uk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

PT-2026-61614

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

PT-2026-61753

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web file/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and...

CVE-2026-32807: Improper Authorization

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

Linux Distros Unpatched Vulnerability : CVE-2026-64030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is...

Amazon Linux 2023 : acl, libacl, libacl-devel (ALAS2023-2026-1986)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1986 advisory. A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname...

CVE-2026-15788: Improper Link Resolution Before File Access

BuildKit's cache mount source= selector on Windows Container on Windows WCOW workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon...

CVE-2026-13142: Improper Privilege Management

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an unauthenticated attacker who knows a...

ASUS System Control Interface IOCTL Disclosure DoS

The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...

TP-Link-TL-WR841ND-Security-Audit

...

GHSA-CFCQ-76GR-62X8

creationtimestamp| type| source ---|---|--- 2026-07-19 21:03:21+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mqzojds3zg2g...

CVE-2026-12484

creationtimestamp| type| source ---|---|--- 2026-07-19 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqzoeigsm42w 2026-07-19 21:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzrhgdo6n27 2026-07-19 22:00:39+00:00| seen|...

CVE-2026-64178

creationtimestamp| type| source ---|---|--- 2026-07-19 18:45:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzgsinfn62i 2026-08-03 09:19:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803 2026-10-01 18:00:00+00:00| seen...

CVE-2026-64172

creationtimestamp| type| source ---|---|--- 2026-07-19 18:17:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzfabtzjb2e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-64186

creationtimestamp| type| source ---|---|--- 2026-07-19 18:13:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzf2ciwmo22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...