CVE-2026-55404

A flaw was found in yt-dlp and youtube-dl, command-line tools for downloading audio and video. This vulnerability allows an attacker to inject malicious code into shortcut files .url or .desktop when certain options, such as --write-link, are used. By manipulating the webpageurl or filename...

CVE-2026-55478

creationtimestamp| type| source ---|---|--- 2026-07-10 20:24:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcy666gy22k 2026-07-11 01:10:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi5jpwji2s...

CVE-2026-55474

creationtimestamp| type| source ---|---|--- 2026-07-10 20:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxtv2z5a27 2026-07-11 01:06:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhwmqcop2w...

CVE-2026-6872

creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxpfnoro2x...

CVE-2026-54089

creationtimestamp| type| source ---|---|--- 2026-07-10 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcxoiwmmg2z 2026-07-10 20:35:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xqp3-jq6g-x3qm 2026-07-11...

CVE-2026-53449

creationtimestamp| type| source ---|---|--- 2026-07-10 20:14:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxlbbnuh2i 2026-07-11 01:02:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhnsjwyw2w 2026-07-14 04:51:38+00:00| seen|...

GHSA-7835-87Q9-RGVV

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:54+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mqcxbpjci62k 2026-09-14 14:07:33+00:00| seen| https://bsky.app/profile/bokonon.ai/post/3mvibucyh6a2t...

CVE-2026-55460

creationtimestamp| type| source ---|---|--- 2026-07-10 20:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxahqevc2l 2026-07-11 01:12:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdiailwdp2y 2026-08-28 18:35:08+00:00| published-proof-of-concept|...

CVE-2026-55843

creationtimestamp| type| source ---|---|--- 2026-07-10 20:07:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcx6o6zfz2g 2026-07-11 01:01:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhmz3k6w2f 2026-08-29 01:28:38+00:00| seen|...

CVE-2026-53450

creationtimestamp| type| source ---|---|--- 2026-07-10 20:02:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwvpqku22i 2026-07-11 01:02:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhogqben2e...

CVE-2026-54329

creationtimestamp| type| source ---|---|--- 2026-07-10 19:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwmrbo5x25 2026-07-11 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqf5agynjb2r 2026-09-08 09:37:07+00:00| seen|...

CVE-2026-54070

creationtimestamp| type| source ---|---|--- 2026-07-10 19:42:40+00:00| seen| https://gist.github.com/alon710/b90f7da9d543dd51155aefe8a87d6f66 2026-07-10 20:35:11+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w7cg-whh7-xp28...

CVE-2026-59151

creationtimestamp| type| source ---|---|--- 2026-07-10 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsuscyeq2z 2026-07-10 20:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcysjpafd2g 2026-07-11 01:13:41+00:00| seen|...

CVE-2026-51599

creationtimestamp| type| source ---|---|--- 2026-07-10 18:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcsk2unmk2h...

CVE-2026-55464 Snipe-IT: Stored XSS via Markdown custom field

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with assets.edit permission to place a malicious link in a markdown-textarea custom field that executes arbitrary JavaScrip...

CVE-2026-53653

creationtimestamp| type| source ---|---|--- 2026-07-10 18:20:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqcra4ilol2c 2026-07-10 22:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdadyx4fk27 2026-07-10 23:35:17+00:00| seen|...

CVE-2026-56667

ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to router.push without applying the isSafeRedirectUri check, allowing an organization or instance administrator to store a...

CVE-2026-58492

creationtimestamp| type| source ---|---|--- 2026-07-10 17:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcpfumldx24 2026-07-10 23:13:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbkwnpvh2d 2026-07-10 23:13:07+00:00| seen|...

CVE-2026-56813

creationtimestamp| type| source ---|---|--- 2026-07-10 17:44:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp6v44l32e 2026-07-10 21:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd4zxcvbj2d...

CVE-2026-55671 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...