CVE-2026-53582

creationtimestamp| type| source ---|---|--- 2026-07-08 01:14:16+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3mq3wwxfn7s2a 2026-08-22 13:00:03+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/24220 2026-08-23 00:00:40+00:00| published-proof-of-concept|...

CVE-2026-55077

creationtimestamp| type| source ---|---|--- 2026-07-08 00:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x...

CVE-2026-50810

creationtimestamp| type| source ---|---|--- 2026-07-08 00:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3uw3pphq27...

CVE-2026-50811

creationtimestamp| type| source ---|---|--- 2026-07-08 00:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ultblaa2k...

CVE-2026-55418

creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3t74gzc427...

TP-Link Archer C5 has a cross-site scripting vulnerability (CNVD-2026-28254)

The TP-Link Archer C5 is a dual-band wireless router produced by the Chinese company TP-Link. The TP-Link Archer C5 has a cross-site scripting vulnerability. This vulnerability stems from insufficient server-side validation in the web management interface and improper control of user input...

TP-Link Archer AX20 has a vulnerability related to input validation errors

The TP-Link Archer AX20 is a dual-band wireless router produced by the Chinese company TP-Link. The TP-Link Archer AX20 has a vulnerability related to input validation. This vulnerability stems from improper validation of URLs provided by users via the web interface. Attackers can exploit this...

CVE-2026-14495: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists because dologin\s::rrand seeds the Mersenne Twister with mtsranddouble microtime 1000000 — discarding the integer-second...

PT-2026-56322

The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and including, 4.3. The vulnerability exists because dologins::rrand seeds the Mersenne Twister with mt sranddouble microtime 1000000 — discarding the integer-second...

CVE-2026-58494: Improper Preservation of Permissions

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

PT-2026-56539

Name of the Vulnerable Software and Affected Versions PasswordPusher versions prior to 2.8.1 Description Insufficient validation in the valid url function allows the application to accept data URI schemes in URL push payloads. This enables attackers to create malicious pushes containing...

PT-2026-56502

Name of the Vulnerable Software and Affected Versions linkify-it versions prior to 5.0.2 Confluence Data Center versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.1.2, and 10.2.0 Description A Regular Expression Denial of Service ReDoS exists in the mailto: schema validator. When using the .te...

CVE-2026-39822: UNIX Symbolic Link (Symlink) Following

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...

Linux kernel Tegra Clock Init Heap Buffer Overflow DoS

The vulnerability of the tegra114clockinit function in the drivers/clk/tegra/clk-tegra114.c file of the Samsung Exynos Linux kernel driver relates to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

yt-dlp: Improper Neutralization of Special Elements

https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-6v4j-43gg-vj32 reports: yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using...

Linux kernel InfiniBand driver Heap Buffer Overflow DoS

The vulnerability of the destroymc function in the drivers/infiniband/core/cma.c file of the Linux kernel’s InfiniBand driver is related to errors during link counter updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2026-42958

creationtimestamp| type| source ---|---|--- 2026-07-07 23:49:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3s6sucnj27...

CVE-2026-53730

creationtimestamp| type| source ---|---|--- 2026-07-07 23:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3qxurcn52i...

CVE-2026-53729

creationtimestamp| type| source ---|---|--- 2026-07-07 23:22:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3qpdpbgf2l...

CVE-2026-14380

creationtimestamp| type| source ---|---|--- 2026-07-07 22:59:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq3pggr5xk24 2026-07-08 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq3stiucln2f 2026-07-08 00:00:45+00:00| seen|...