75736 matches found
CVE-2026-6851
The CVE-2026-6851 entry concerns Bitdefender products on Windows: Bitdefender Total Security and Bitdefender Internet Security, specifically the File Shredder module. The vulnerability is described as an improper link resolution before file access (link following) that enables a less-privileged l...
EUVD-2026-43632
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-11802
creationtimestamp| type| source ---|---|--- 2026-07-14 06:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlk4nvqvm26 2026-07-19 20:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzn5ltmxb27...
CVE-2026-7640
creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...
CVE-2026-15629
creationtimestamp| type| source ---|---|--- 2026-07-14 05:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlizzzk3r2g 2026-07-19 20:06:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzleascuc2a...
CVE-2026-11390
creationtimestamp| type| source ---|---|--- 2026-07-14 05:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqline2oyb2x 2026-07-19 20:04:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzla3x53e2i...
Malicious Package
Overview clipboard-drop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the bytePlusDownloadVideo function. An attacker can access internal resources or perform unauthorized requests by supplying crafted values to the output.videourl argument. Remediation There is no fix...
CVE-2026-53364
creationtimestamp| type| source ---|---|--- 2026-07-14 03:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcqy52x52y 2026-07-16 08:21:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsk6jdkt2n 2026-10-01 18:00:00+00:00| seen|...
CVE-2026-61505
creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...
CVE-2026-61502
creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc6vdxiy2s...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629
CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...
EUVD-2026-43618
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15628 zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function Vision.downloadtodataurl of the file agent/tools/vision/vision.py of the component Vision Tool. Performing a manipulation of the argument image results in server-side request...