CVE-2026-53781 Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download

Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers, chunked transfer encoding, or failed HEAD requests...

CVE-2026-50633

creationtimestamp| type| source ---|---|--- 2026-06-11 19:04:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzw4xdw6y2h 2026-06-14 12:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moapulsnzq2a 2026-07-07 12:21:32+00:00| seen|...

Exploit for Command Injection in Tp-Link Tapo_C200_Firmware

🔍 CVE-2021-4045: Vulnerabilidad de Inyección de Comandos en...

CVE-2026-12029

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrlmr5g2p 2026-06-12 05:25:16+00:00|...

CVE-2026-50631

creationtimestamp| type| source ---|---|--- 2026-06-11 17:45:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrq2n2dz2f...

CVE-2026-53661

creationtimestamp| type| source ---|---|--- 2026-06-11 17:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzr2bnmce25...

CVE-2026-46529

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-27022

creationtimestamp| type| source ---|---|--- 2026-06-11 16:10:14+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u...

CVE-2026-11816

creationtimestamp| type| source ---|---|--- 2026-06-11 15:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzijwsfgq25 2026-06-11 17:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzrmcbbgp25...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception through the link validation. An attacker can cause the application to crash or become unresponsive by submitting deeply nested input that triggers an unhandled RangeError exception. This is only exploitable if input...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception through the link validation. An attacker can cause the application to crash or become unresponsive by submitting deeply nested input that triggers an unhandled RangeError exception. This is only exploitable if input...

GHSA-Q7CG-457F-VX79 joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

Impact Denial of service via untrapped exception in services validating user-supplied JSON / object input with recursive link schemas. The blast radius depends on how the application invokes joi: - Highest impact: validate called without try/catch in a request handler would cause an unhandled...

NPM: joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas

NPM: joi has an uncaught RangeError on deeply nested input through recursive link schemas vulnerability discovered by ? in WordPress Npm joi versions 17.13.4...

CVE-2023-33999

creationtimestamp| type| source ---|---|--- 2026-06-11 12:46:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnzazyk7gz2z...

CVE-2026-6269

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260612...

CVE-2026-9735

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxhchwy25...

CVE-2026-40987

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d 2026-07-12 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/88511 2026-07-13 00:00:50+00:00| published-proof-of-concept|...

CVE-2026-40986

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d...

CVE-2026-9204

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources...

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...