65910 matches found
GO-2026-5159 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix in github.com/filebrowser/filebrowser
File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix in github.com/filebrowser/filebrowser...
CVE-2026-47770
creationtimestamp| type| source ---|---|--- 2026-06-25 18:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ieq6bl2u...
CVE-2026-50021
creationtimestamp| type| source ---|---|--- 2026-06-25 18:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ap4dzc2z 2026-06-27 00:35:37+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-q6j5-fjx5-2mc3...
CVE-2026-55180
creationtimestamp| type| source ---|---|--- 2026-06-25 18:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zolmti52o 2026-06-27 00:35:17+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-3qhv-2rgh-x77r 2026-06-29 23:02:17+00:00| seen|...
CVE-2026-56768 Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method
Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...
CVE-2026-56768 Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method
Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...
EUVD-2026-39520
Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...
CVE-2026-56768
Vulnerability summary (CVE-2026-56768) Seahub versions before 13.0.23 fail to enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated access when a folder share-link token is present. An attacker can call the GET endpoint to obtain a fileserver zip token ...
CVE-2026-48995
creationtimestamp| type| source ---|---|--- 2026-06-25 18:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s 2026-06-26 22:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp 2026-06-29 22:43:27+00:00| seen|...
CVE-2026-49839
creationtimestamp| type| source ---|---|--- 2026-06-25 17:55:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yt3of422z...
CVE-2026-50017
creationtimestamp| type| source ---|---|--- 2026-06-25 17:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j...
CVE-2026-9184
creationtimestamp| type| source ---|---|--- 2026-06-25 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4tbneuuh2p...
CVE-2026-56122
creationtimestamp| type| source ---|---|--- 2026-06-25 16:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4shoopn42j...
CVE-2026-54842
creationtimestamp| type| source ---|---|--- 2026-06-25 15:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rvrpi3o2j...
CVE-2026-54836
creationtimestamp| type| source ---|---|--- 2026-06-25 15:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qf6ns552t 2026-07-21 06:00:07+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml 2026-07-22...
CVE-2026-54822
creationtimestamp| type| source ---|---|--- 2026-06-25 15:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qap4vhl2e 2026-06-29 12:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpghq55ty32i...
CVE-2026-56053
creationtimestamp| type| source ---|---|--- 2026-06-25 15:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4pv42j7s2j 2026-07-07 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpztyiy63o24...
CVE-2026-54821
Subscriber Sensitive Data Exposure in Visual Link Preview = 2.3.1 versions...