CVE-2026-36907

creationtimestamp| type| source ---|---|--- 2026-06-29 14:48:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq7xwoyx2o 2026-06-29 21:48:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhqiwwz62t...

CVE-2026-36908

creationtimestamp| type| source ---|---|--- 2026-06-29 14:41:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpu2rr3h2e 2026-06-29 21:49:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhr4l2n22k...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-49983

creationtimestamp| type| source ---|---|--- 2026-06-29 13:58:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnghpgio2n...

CVE-2026-57333 WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

EUVD-2026-40104

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-57333

CVE-2026-57333 describes an unauthenticated reflected Cross Site Scripting (XSS) vulnerability in the WordPress plugin Link Whisper Free , affecting versions up to and including 0.9.4 . The connected sources consistently identify it as a reflected XSS issue in the Free plugin; no root-cause detai...

CVE-2026-57333 WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Link Whisper Free = 0.9.4 versions...

CVE-2026-41991

creationtimestamp| type| source ---|---|--- 2026-06-29 13:25:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgllesxl72e 2026-06-29 20:59:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphexg5mdh2e 2026-07-01 02:33:52+00:00| seen|...

CVE-2026-13559

creationtimestamp| type| source ---|---|--- 2026-06-29 13:20:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgle4ga2j2o...

CVE-2026-54369

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

CVE-2026-13560

creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgja2ndnm2n 2026-06-29 20:16:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphclnasu625...

CVE-2026-13563

creationtimestamp| type| source ---|---|--- 2026-06-29 12:42:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgj76gdbe2t 2026-06-29 19:36:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphadfcnq32x 2026-06-29 20:19:24+00:00| seen|...

EUVD-2026-40086

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat check and subsequent symlink-following operations such as stat, chown,...

CVE-2026-41992

creationtimestamp| type| source ---|---|--- 2026-06-29 12:36:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgivbc3n625 2026-06-29 20:59:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphey2ccpx2g 2026-07-01 02:33:54+00:00| seen|...

EUVD-2026-40084

A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDo...

UBUNTU-CVE-2026-41991

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID PID. This predictable filename is created without...