76453 matches found
CVE-2026-6851
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-59674
A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...
CVE-2026-50574
creationtimestamp| type| source ---|---|--- 2026-07-14 08:07:19+00:00| seen| https://gist.github.com/akib-h/a603a4aaf4aab24ac683c30e9a2ad670 2026-07-18 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwvuwkmrv2l...
CVE-2026-59674
A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...
CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
EUVD-2026-43632
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-6851
The CVE-2026-6851 entry concerns Bitdefender products on Windows: Bitdefender Total Security and Bitdefender Internet Security, specifically the File Shredder module. The vulnerability is described as an improper link resolution before file access (link following) that enables a less-privileged l...
CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
CVE-2026-11802
creationtimestamp| type| source ---|---|--- 2026-07-14 06:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlk4nvqvm26 2026-07-19 20:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzn5ltmxb27...
CVE-2026-7640
creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...
CVE-2026-15629
creationtimestamp| type| source ---|---|--- 2026-07-14 05:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlizzzk3r2g 2026-07-19 20:06:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzleascuc2a...
CVE-2026-11390
creationtimestamp| type| source ---|---|--- 2026-07-14 05:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqline2oyb2x 2026-07-19 20:04:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzla3x53e2i...
Malicious Package
Overview clipboard-drop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the bytePlusDownloadVideo function. An attacker can access internal resources or perform unauthorized requests by supplying crafted values to the output.videourl argument. Remediation There is no fix...
CVE-2026-53364
creationtimestamp| type| source ---|---|--- 2026-07-14 03:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcqy52x52y 2026-07-16 08:21:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsk6jdkt2n 2026-10-01 18:00:00+00:00| seen|...
CVE-2026-61505
creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...
CVE-2026-61502
creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc6vdxiy2s...
EUVD-2026-43618
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...