65881 matches found
CVE-2026-56224
Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...
CVE-2026-11541
creationtimestamp| type| source ---|---|--- 2026-06-30 22:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk34s2k5x2u 2026-07-01 02:51:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpkj56ehry2l 2026-07-02 01:31:56+00:00| seen|...
CVE-2026-35505
creationtimestamp| type| source ---|---|--- 2026-06-30 22:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjz6qpaiy2z 2026-07-01 02:36:37+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01 2026-07-01 02:53:38+00:00| seen|...
CVE-2025-36320
creationtimestamp| type| source ---|---|--- 2026-06-30 22:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjyt6bsws24 2026-07-01 18:12:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm4kfefir2l...
gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...
CVE-2026-10562 Unauthenticated Open Redirect Vulnerability on TP-Link Archer AX20 Web Interface
An unauthenticated URL redirection vulnerability has been identified in Archer AX20 V2 due to improper validation of user-supplied URL input within the web interface. An unauthenticated attacker can craft URLs containing URL-encoded path traversal sequences. When processed by the embedded web...
CVE-2026-58375
creationtimestamp| type| source ---|---|--- 2026-06-30 18:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjnp7uyku23...
CVE-2026-58372
creationtimestamp| type| source ---|---|--- 2026-06-30 18:25:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmudi45y2u 2026-07-02 05:56:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndwv4afe2t...
CVE-2026-8864
creationtimestamp| type| source ---|---|--- 2026-06-30 18:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm2lvbnn2u...
CVE-2026-10654
creationtimestamp| type| source ---|---|--- 2026-06-30 18:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p...
CVE-2025-23350
creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-02 02:18:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxplqz6q2b 2026-07-02 08:11:34+00:00| seen|...
CVE-2026-48307
ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...
CVE-2026-57082
creationtimestamp| type| source ---|---|--- 2026-06-30 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjezu3btb2s...
CVE-2026-48307 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...
CVE-2026-48307
ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially resulting in arbitrary code execution in the context of the current user...
CVE-2026-13135
creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpjajjku442c 2026-07-01 02:50:45+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0819...
CVE-2026-10817
creationtimestamp| type| source ---|---|--- 2026-06-30 14:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7yqkhca2m 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...
CVE-2026-58016
creationtimestamp| type| source ---|---|--- 2026-06-30 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7gtiwvm2t 2026-07-02 05:19:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnbtzxrwh2k 2026-07-21 12:01:08+00:00| seen|...
CVE-2026-58012
creationtimestamp| type| source ---|---|--- 2026-06-30 14:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj775x7sw2v 2026-07-21 12:00:56+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5bj5er2t 2026-07-29 12:01:35+00:00| seen|...