CVE-2026-13807

creationtimestamp| type| source ---|---|--- 2026-07-01 19:47:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbuchs6h26 2026-07-02 07:19:19+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:29:40+00:00| seen|...

CVE-2026-41121

Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access 'Link Following’ vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-13773

creationtimestamp| type| source ---|---|--- 2026-07-01 18:59:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm76q5gwb2r 2026-07-06 18:55:02+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mpyrbwcy7l2h...

CVE-2025-36336

creationtimestamp| type| source ---|---|--- 2026-07-01 18:57:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm74jljmt2p...

CVE-2026-41121

Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access 'Link Following’ vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-41121

Dell Device Management Agent (DDMA) versions before 26.05 are affected by an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privilege, local attacker could potentially exploit this to achieve Elevation of Privileges. The CVSS3.1 vector is AV:L/AC:L/PR:L/UI:R/S:U...

MAL-2026-6707 Malicious code in svgson-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb1026a96918a3f4ed4c7c4f0aa75411c3869f1ad14405174e396b4e67907d2 index.js exports an undocumented getPlugin function which, when invoked, performs an HTTP GET to https://shorturl.at/147uq, JSON-parses the response...

CVE-2026-7873

creationtimestamp| type| source ---|---|--- 2026-07-01 18:10:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4ibmvya2b 2026-07-03 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mppmlrmxi52r 2026-07-03 12:22:26+00:00| seen|...

CVE-2025-36333

creationtimestamp| type| source ---|---|--- 2026-07-01 18:09:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4f3psxy2p...

CVE-2026-58138

creationtimestamp| type| source ---|---|--- 2026-07-01 17:59:24+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpm3tty4fp25 2026-07-13 22:00:16+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-14 00:00:32+00:00| seen| https://t.me/GithubRedTeam/91343 2026-07-15...

CVE-2026-34103

creationtimestamp| type| source ---|---|--- 2026-07-01 17:43:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2xmdmci2a 2026-07-01 23:03:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpmmug6efc2r 2026-07-02 08:27:18+00:00| seen|...

CVE-2026-34102

creationtimestamp| type| source ---|---|--- 2026-07-01 17:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2gy7a572n 2026-07-02 08:26:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmd5kgjm2y 2026-07-02 09:46:35+00:00| seen|...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-34100

creationtimestamp| type| source ---|---|--- 2026-07-01 17:30:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpm2ab3ta22p 2026-07-02 08:28:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnmfaow5r2m 2026-07-02 12:02:37+00:00| seen|...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-7517

creationtimestamp| type| source ---|---|--- 2026-07-01 17:10:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mplz4clqbz2f...

CVE-2026-24250

creationtimestamp| type| source ---|---|--- 2026-07-01 16:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwvojx5z2h 2026-07-02 04:29:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn72yqmkt2l...

CVE-2026-24245

creationtimestamp| type| source ---|---|--- 2026-07-01 16:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplwf2i7xe26 2026-07-02 04:27:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6woaywm2k...

CVE-2026-58127

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET...

CVE-2026-58029

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php,...