CVE-2026-3014

creationtimestamp| type| source ---|---|--- 2026-07-14 10:41:41+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzh4vcfl2q 2026-07-14 12:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm7i7rodg2i 2026-07-20 19:38:46+00:00| seen|...

CVE-2026-15075

creationtimestamp| type| source ---|---|--- 2026-07-14 08:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlst2rjn527 2026-07-19 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqz7nav5rl2s 2026-07-20 05:37:26+00:00| seen|...

CVE-2026-6851

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

CVE-2026-59674

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...

CVE-2026-50574

creationtimestamp| type| source ---|---|--- 2026-07-14 08:07:19+00:00| seen| https://gist.github.com/akib-h/a603a4aaf4aab24ac683c30e9a2ad670 2026-07-18 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwvuwkmrv2l...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

EUVD-2026-43632

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

CVE-2026-6851

The CVE-2026-6851 entry concerns Bitdefender products on Windows: Bitdefender Total Security and Bitdefender Internet Security, specifically the File Shredder module. The vulnerability is described as an improper link resolution before file access (link following) that enables a less-privileged l...

CVE-2026-11802

creationtimestamp| type| source ---|---|--- 2026-07-14 06:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlk4nvqvm26 2026-07-19 20:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzn5ltmxb27...

CVE-2026-7640

creationtimestamp| type| source ---|---|--- 2026-07-14 06:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t 2026-07-19 20:28:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o 2026-07-19 20:28:50+00:00| seen|...

CVE-2026-15629

creationtimestamp| type| source ---|---|--- 2026-07-14 05:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlizzzk3r2g 2026-07-19 20:06:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzleascuc2a...

CVE-2026-11390

creationtimestamp| type| source ---|---|--- 2026-07-14 05:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqline2oyb2x 2026-07-19 20:04:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzla3x53e2i...

CVE-2026-53364

creationtimestamp| type| source ---|---|--- 2026-07-14 03:55:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlcqy52x52y 2026-07-16 08:21:27+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsk6jdkt2n...

CVE-2026-61505

creationtimestamp| type| source ---|---|--- 2026-07-14 03:46:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlca76h742y...

CVE-2026-61502

creationtimestamp| type| source ---|---|--- 2026-07-14 03:45:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlc6vdxiy2s...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15629

CVE-2026-15629 affects louisho5 picobot up to version 0.2.0. The vulnerability is in the Workspace Handler’s internal/agent/tools/filesystem.go, specifically the functions CreateSkill and GetSkill , where a manipulation can lead to link following . Remote exploitation is possible. Public exploit ...

CVE-2026-15629 louisho5 picobot Workspace filesystem.go GetSkill link following

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...