65913 matches found
CVE-2026-54010
CVE-2026-54010 affects Open WebUI prior to version 0.9.6. An authenticated user could attach arbitrary file_id values to their own chat messages without ownership/read checks, and then leverage a forged chat-file link to access or delete the victim’s file via shared-chat authorization. The root c...
CVE-2026-27604
creationtimestamp| type| source ---|---|--- 2026-06-23 16:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsdzkx7u2a...
CVE-2026-56116
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send...
EUVD-2026-38496
dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafted Router Advertisements. Attackers can repeatedly send...
CVE-2026-56115
Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but...
CVE-2026-50023
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...
CVE-2026-56114
dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6makemessage in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by serializing an oversized RFC6603 OPTIONPDEXCLUDE option body...
CVE-2026-10609
creationtimestamp| type| source ---|---|--- 2026-06-23 16:01:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrkfzp7i2a...
CVE-2026-4610
creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...
CVE-2026-12969
creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...
CVE-2026-56248
creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...
CVE-2026-56322
creationtimestamp| type| source ---|---|--- 2026-06-23 14:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlc63flt2q...
CVE-2026-56222
creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...
CVE-2026-10711
creationtimestamp| type| source ---|---|--- 2026-06-23 13:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkhdtk2l2t...
CVE-2025-71365
creationtimestamp| type| source ---|---|--- 2026-06-23 13:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxk6f6zbv2o...
CVE-2026-2264
creationtimestamp| type| source ---|---|--- 2026-06-23 12:06:38+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3moxefoiklk2n...
GHSA-4Q6H-8P4V-67VQ
creationtimestamp| type| source ---|---|--- 2026-06-23 09:41:50+00:00| seen| https://gist.github.com/alon710/ca5754f7e7e7aeff3ad1cd262378f58b...