CVE-2026-15392

A flaw was found in DBD::File. The completetablename method, responsible for building absolute table file paths, does not verify if the file is a symbolic link. This oversight allows a local attacker to create a symbolic link within the data directory that points to an arbitrary file outside of t...

CVE-2026-15445

creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqtcdav2e2h...

CVE-2026-52204

creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:06+00:00| seen| https://gist.github.com/this1slwl/d975073bb5feaafd09d9383e8351fb55...

CVE-2026-12684

creationtimestamp| type| source ---|---|--- 2026-07-16 08:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqshgmjzo2h...

CVE-2026-12585

creationtimestamp| type| source ---|---|--- 2026-07-16 08:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrvjhdwk2m...

CVE-2026-12869

creationtimestamp| type| source ---|---|--- 2026-07-16 08:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrh4tb4c2c...

CVE-2026-12978

creationtimestamp| type| source ---|---|--- 2026-07-16 07:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqr3rj5be2u...

CVE-2026-11866

creationtimestamp| type| source ---|---|--- 2026-07-16 07:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqwv3udz2h...

CVE-2026-53366

creationtimestamp| type| source ---|---|--- 2026-07-16 07:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqgthqbh2s 2026-07-16 17:31:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930842680877521 2026-07-20 17:28:37+00:00| seen|...

CVE-2026-12585 Abandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link Token

The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs them in as another user when the automatic-login option is...

CVE-2026-12585

The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs them in as another user when the automatic-login option is...

CVE-2026-48310

creationtimestamp| type| source ---|---|--- 2026-07-16 03:52:55+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjzqrcy2v 2026-07-18 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqvvzojkgg2s...

CVE-2026-12753

creationtimestamp| type| source ---|---|--- 2026-07-16 03:47:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqda37w6o2n 2026-07-16 06:01:06+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqqkp7zi4p2j...

CVE-2026-20298

creationtimestamp| type| source ---|---|--- 2026-07-16 02:11:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i 2026-07-16 19:00:32+00:00| seen| https://t.me/truesecator/8417 2026-07-17 00:00:49+00:00| seen| https://t.me/truesecator/8417 2026-08-21...

CVE-2026-45533

creationtimestamp| type| source ---|---|--- 2026-07-16 00:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzaxejrl2h...

CVE-2026-50289

creationtimestamp| type| source ---|---|--- 2026-07-16 00:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpx3jzg5o2p 2026-07-16 00:35:08+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839...

CVE-2026-54466

creationtimestamp| type| source ---|---|--- 2026-07-16 00:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpwxxsieh2w 2026-07-17 23:45:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwndmen52g...

PT-2026-60569

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as...

The vulnerability of the mechanism used by Git to resolve programmatic platform names for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the mechanism for resolving Git-link names in the software platform based on Git for collaborative code development in GitLab CE/EE is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a malicious actor to compromise the integrity ...

Python Library yt-dlp < 2026.7.4 Command Injection

The detected version of the yt-dlp Python package is prior to 2026.7.4. It is, therefore, affected by a command injection vulnerability. yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can writ...