GHSA-9Q2P-VC84-2RWM

creationtimestamp| type| source ---|---|--- 2026-03-09 22:10:06+00:00| seen| https://gist.github.com/alon710/c9b7b8cb1e830c7075cb4162b8d49b80...

CVE-2026-31802

node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar npm can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x...

GHSA-93FX-5QGC-WR38

creationtimestamp| type| source ---|---|--- 2026-03-09 20:10:06+00:00| seen| https://gist.github.com/alon710/56622a5fb0d29db6ad09ba417d4e4cd3...

CVE-2026-3741

A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/DfriendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

GHSA-525J-95GF-766F FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info

Summary The remediation for CVE-2026-27611 appears incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info in docker image gtstef/filebrowser:1.3.1-webdav-2. Details The issue stems from two flaws: 1. Tokenized download URLs are written into the...

CVE-2026-3638

creationtimestamp| type| source ---|---|--- 2026-03-09 19:30:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/116200873186129950...

CVE-2026-31829

creationtimestamp| type| source ---|---|--- 2026-03-09 19:20:42+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-fvcw-9w9r-pxc7 2026-03-11 08:10:05+00:00| seen| https://gist.github.com/alon710/1475f09f284d480dbb7f0348bae5ca9a 2026-03-17...

GHSA-HWX8-Q9CG-MQMC

creationtimestamp| type| source ---|---|--- 2026-03-09 19:10:06+00:00| seen| https://gist.github.com/alon710/3fd4142edf95384fd65face73227a201...

GHSA-Q5Q9-2RHP-33QW

creationtimestamp| type| source ---|---|--- 2026-03-09 18:40:05+00:00| seen| https://gist.github.com/alon710/b35bd22da36673db291bcd39a01cd730...

GHSA-X6FW-778M-WR9V

creationtimestamp| type| source ---|---|--- 2026-03-09 18:10:05+00:00| seen| https://gist.github.com/alon710/dd4d266e9eb897cccd36bc7bc2690585...

GHSA-4HGG-C4RR-6H7F

creationtimestamp| type| source ---|---|--- 2026-03-09 17:40:05+00:00| seen| https://gist.github.com/alon710/97d8836abc82cac88ce934ff047f0ac3...

CVE-2005-1849

creationtimestamp| type| source ---|---|--- 2026-03-09 17:15:08+00:00| seen| https://gist.github.com/verdurin/ec4ecbbbe37c7ae1f4a79c34dbdb6793...

CVE-2026-29786

A flaw was found in node-tar. A hardlink that points outside the extraction directory can be created by using a drive-relative link target such as C:../target.txt, allowing a file overwrite outside the current working directory during normal tar.x extraction. Mitigation Red Hat has investigated...

CVE-2025-15568 Command Injection Vulnerability on TP-Link Archer AXE75

A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution RCE when the router is configured with sysmode=ap. Successful exploitation results in root-level...

CVE-2025-15568 Command Injection Vulnerability on TP-Link Archer AXE75

A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution RCE when the router is configured with sysmode=ap. Successful exploitation results in root-level...

EUVD-2025-208421

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup...

EUVD-2025-208422

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup...

EUVD-2025-208419

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard534...

EUVD-2025-208420

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard534...

EUVD-2025-208418

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard52...