GHSA-GHMH-JHMJ-WCMF

creationtimestamp| type| source ---|---|--- 2026-06-23 08:41:51+00:00| seen| https://gist.github.com/alon710/36f3399c6d42cf95c9294583be143e55...

CVE-2026-4102

creationtimestamp| type| source ---|---|--- 2026-06-23 08:23:37+00:00| seen| https://gist.github.com/zanetworker/1c2f8d6638917ee25ed7da3865900455...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

CVE-2026-28496

creationtimestamp| type| source ---|---|--- 2026-06-23 07:40:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-28496.yaml 2026-06-23 16:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxs32hcvd2w 2026-06-23...

Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

MGASA-2026-0227 Updated sslh packages fix security vulnerabilities

CVE-2025-46806, A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures CVE-2025-46807, A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny...

CVE-2026-8172

The Simple Basic Contact Form WordPress plugin (versions

EUVD-2026-38418

The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cross-Site Scripting vulnerability that unauthenticated attackers can exploit against site visitors vi...

CVE-2026-48167

creationtimestamp| type| source ---|---|--- 2026-06-23 01:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow75wphmt2e 2026-06-24 07:11:47+00:00| seen| https://gist.github.com/alon710/ef60a8d2e003433e0632a30f0def6b96...

CVE-2026-48505

creationtimestamp| type| source ---|---|--- 2026-06-23 00:50:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6lzrmz42a...

CVE-2026-48509

creationtimestamp| type| source ---|---|--- 2026-06-23 00:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow65lsemi23 2026-08-24 14:46:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mttk7rbmqb2k...

CVE-2026-54235

creationtimestamp| type| source ---|---|--- 2026-06-23 00:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523...

CVE-2026-48067

creationtimestamp| type| source ---|---|--- 2026-06-23 00:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow55cb5tf2k...

CVE-2026-48510

creationtimestamp| type| source ---|---|--- 2026-06-23 00:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4treusj2o...

PT-2026-51646

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.1 Description In S3-backed deployments, the system fails to perform authorization checks before generating temporary URLs for signature image retrieval. Authenticated users who possess a signature filename can...

CVE-2026-39253

Pivotal CRM version 6.6.04.08 is vulnerable to remote code execution (RCE) via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components. The issue is characterized as a deserialization of untrusted data (CWE-502). While one document indicates an incomplete fix led ...

Automated Logic WebCTRL Premium Server URL Redirection to Untrusted Site (CVE-2024-8527)

CWE-601 URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists in Automated Logic WebCTRL and Carrier i-Vu Building Automation System products. The application accepts a user-supplied URL and redirects without proper validation, allowing attackers to exploit user sessions through ...

PT-2026-51629

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description An issue exists in the Repository.UploadRepoFiles function where symlink checks are performed only on the leaf of the upload target using osx.IsSymlinktargetPath, unlike other functions that validate...

Cisco Webex App URL Redirection

The vulnerability of the Cisco Webex App for collaborative work relates to the redirection of the URL to an unreliable website as a result of incorrect processing of HTTP request parameters. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...

CVE-2026-54268

creationtimestamp| type| source ---|---|--- 2026-06-22 23:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow3ikyahx2q 2026-07-20 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2vbuzolw2v...