65442 matches found
CVE-2026-8626
The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHPSELF Parameter in all versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
PT-2026-42196
Name of the Vulnerable Software and Affected Versions InfoScale version 9.1.3 Operations Manager VIOM Description Cross-Site Request Forgery CSRF allows an attacker to trick a user with an active session into clicking a malicious HTML link. This action triggers unintended modifications within the...
CVE-2026-44925
Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...
Rsync 后置链接漏洞
Rsync is a fast and versatile file copying tool developed by RsyncProject. It is used for both remote and local files. Versions of Rsync 3.4.2 and earlier have a post-release vulnerability due to a symbolic link race condition in the path system call. Local attackers can redirect operations to...
PT-2026-42159
Name of the Vulnerable Software and Affected Versions Windows Admin Center in Azure Portal affected versions not specified Description Improper access control and incorrect link resolution before file access, known as link following, allows an authorized attacker to elevate privileges both locall...
Microsoft Defender 后置链接漏洞
Microsoft Defender is a threat protection software developed by the American company Microsoft. Microsoft Defender has a postback link vulnerability, which stems from improper link resolution before file access. This vulnerability could allow authorized attackers to gain local privileges...
PT-2026-45152
Name of the Vulnerable Software and Affected Versions RT versions 6.0.0 through 6.0.2 Description An issue exists where an authenticated user can be induced to visit a crafted URL, allowing an attacker to execute arbitrary JavaScript within the user's browser session via reflected Cross-Site...
Linux Distros Unpatched Vulnerability : CVE-2026-43335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icclinknodes The change to dynam...
CVE-2026-44925
CVE-2026-44925 describes a Cross-Site Request Forgery (CSRF) in InfoScale v.9.1.3 Operations Manager (VIOM). The vulnerability arises from an ability for an attacker to coerce an active VIOM session user into clicking a crafted HTML link, resulting in unintended modifications within the VIOM web ...
Microsoft Defender Link Following Vulnerability
Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally...
PT-2026-42370
monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...
CVE-2025-57798
creationtimestamp| type| source ---|---|--- 2026-05-19 23:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmajtpw52s2k...
CVE-2023-7345
creationtimestamp| type| source ---|---|--- 2026-05-19 22:59:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaiki2yt62c...
CVE-2026-32739
creationtimestamp| type| source ---|---|--- 2026-05-19 22:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmai2aofa52p...
CVE-2026-39250
creationtimestamp| type| source ---|---|--- 2026-05-19 22:32:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmah35t7tn2r...
CVE-2026-8492
The CVE-2026-8492 issue concerns the GTranslate/Translate Drupal module for Drupal, where a MAID vulnerability allows Resource Location Spoofing. The root cause is inadequate validation in the module’s language-switcher widget JavaScript, specifically around document.currentScript, which can caus...
CVE-2026-8492 Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035
Modification of Assumed-Immutable Data MAID vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...