PT-2026-57891

OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers can exploit remote symlink parents to bypass policy checks and authorization boundaries when the...

PT-2026-60078

Summary A stored cross-site scripting XSS vulnerability exists in NukeViet CMS versions 4.x through 4.5.08. A low-privileged authenticated user can store a JavaScript payload in their profile's display name fields. The payload executes in the browser of any visitor — including administrators — wh...

CVE-2026-52533

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

Windows Defender <= 1.1.26050.11 Elevation of Privilege (RoguePlanet) (CVE-2026-50656)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to or equal to 1.1.26050.11. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft Defende...

CVE-2026-52533

CVE-2026-52533 affects D-Link DIR-1253 v1.0.1.250923.142435. The issue enables privilege escalation via the etc/shadow component file. Details across connected sources consistently describe the same affected product and vector; no exploit steps or patches are provided in the supplied documents. T...

GHSA-2FFJ-W4MJ-PG37

creationtimestamp| type| source ---|---|--- 2026-07-12 22:58:01+00:00| seen| https://gist.github.com/wyattgill9/990529c04d4b62e11a1f63fb789c30e4...

CVE-2020-3961

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6702 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6702 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6702...

CVE-2020-6110

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:18+00:00| seen| https://t.me/pleyadesit/6631 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6631 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6631 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/182...

CVE-2020-15299

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/6928 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/6928 2026-07-14 00:00:49+00:00| seen| https://t.me/pleyadesit/6928...

CVE-2020-15895

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7083 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7083 2026-07-14 00:00:50+00:00| seen| https://t.me/pleyadesit/7083...

CVE-2020-15896

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7083 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7083 2026-07-14 00:00:50+00:00| seen| https://t.me/pleyadesit/7083...

CVE-2026-15548

creationtimestamp| type| source ---|---|--- 2026-07-12 21:21:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116909098681190525...

CVE-2026-15505

creationtimestamp| type| source ---|---|--- 2026-07-12 20:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhzcc6z252e 2026-07-12 23:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiex6yemk2x 2026-07-13 00:15:03+00:00| seen|...

CVE-2026-10663

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpqtx3wg2a 2026-07-12 19:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhw6aaisn2i 2026-07-14 00:35:05+00:00| seen|...

CVE-2026-15502

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbrrkom622 2026-07-12 13:38:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhceppdnl2w 2026-07-12 17:16:28+00:00| seen|...

GHSA-PHRQ-PC6R-F6GH

creationtimestamp| type| source ---|---|--- 2026-07-12 13:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589 2026-07-13 00:00:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589...

CVE-2026-56241

creationtimestamp| type| source ---|---|--- 2026-07-12 12:36:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6wgwogn2i 2026-07-12 12:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh7l7ob2b26 2026-07-12 14:01:25+00:00| seen|...

CVE-2026-56252

creationtimestamp| type| source ---|---|--- 2026-07-12 12:27:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6hb2dvi2x 2026-07-14 00:43:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxyloxkn2w...

CVE-2026-61874 filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete

filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in DeleteWithPathPrefix, allowing authenticated users to leave stale public shares behind. Attackers can delete a shared directory using a trailing-slash path, then recreate the same directory to expose ne...

CVE-2026-15495

creationtimestamp| type| source ---|---|--- 2026-07-12 11:33:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3fua6jo2z 2026-07-14 00:37:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxoxfy4y27...