76455 matches found
PT-2026-58282
Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...
PT-2026-58827
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcp getComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack m...
PT-2026-58660
Heap-based buffer overflow in Universal Plug and Play upnp.dll allows an authorized attacker to elevate privileges locally...
PT-2026-57980
Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...
PT-2026-57934
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read file/write file/edit file of the file tools/fs ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue...
PT-2026-58777
Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description An Improper Redirect Open Redirect issue exists where the software fails to...
PT-2026-58153
Name of the Vulnerable Software and Affected Versions Universal Plug and Play upnp.dll affected versions not specified Description Improper link resolution before file access, also known as link following, occurs in the upnp.dll component. This allows an authorized attacker to disclose informatio...
PT-2026-57958
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
PHP-FPM XSS
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...
PT-2026-58417
Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...
UBUNTU-CVE-2026-50526
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-58445
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At...
PT-2026-58163
Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...
Security Update for Microsoft .NET Core SDK (July 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...
CVE-2026-57215
creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...
CVE-2026-62194
creationtimestamp| type| source ---|---|--- 2026-07-13 23:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkstf3jth2l 2026-07-15 11:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqomz5i76z22...
CVE-2026-62200
creationtimestamp| type| source ---|---|--- 2026-07-13 22:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z 2026-07-15 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626...
CVE-2026-62185
creationtimestamp| type| source ---|---|--- 2026-07-13 22:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrepm4uj2g...