65918 matches found
dotnet: .NET: Local file tampering via link following vulnerability
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...
CVE-2026-28381
creationtimestamp| type| source ---|---|--- 2026-06-22 16:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdgbwzk622 2026-06-22 17:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3movepagixn2c 2026-06-22 22:26:13+00:00| seen|...
CVE-2026-6062
creationtimestamp| type| source ---|---|--- 2026-06-22 16:38:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movd5djfrc2j...
CVE-2026-6653
creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3movco6cnwk26 2026-07-08 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533bbiim2i 2026-07-10 12:01:08+00:00| seen|...
CVE-2026-12888
creationtimestamp| type| source ---|---|--- 2026-06-22 16:09:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbipzlbt22...
CVE-2026-9029
creationtimestamp| type| source ---|---|--- 2026-06-22 16:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbdtlnmn2d...
CVE-2024-54178
creationtimestamp| type| source ---|---|--- 2026-06-22 16:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movb37j3hi2q...
CVE-2025-2669
creationtimestamp| type| source ---|---|--- 2026-06-22 15:57:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movatrkxaf2t...
CVE-2026-48970
creationtimestamp| type| source ---|---|--- 2026-06-22 15:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov6jlwa6l2v...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2026-53655
node-tar (node-tar) before version 7.5.16 is vulnerable: it applies a PAX extended header size override to the next header entry, including intermediary L/K/x headers, which desynchronizes the stream cursor from other tar implementations. This yields a tar-parser interpretation differential (CWE-...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2026-48966
creationtimestamp| type| source ---|---|--- 2026-06-22 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov36cdxgj2d...
GHSA-39J6-789Q-QXVH
creationtimestamp| type| source ---|---|--- 2026-06-22 13:09:18+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z...
CVE-2023-45796
creationtimestamp| type| source ---|---|--- 2026-06-22 12:22:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouusrxc3a22...
CVE-2023-45795
creationtimestamp| type| source ---|---|--- 2026-06-22 12:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutz6ssbh2j...
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...
kernel: wifi: mac80211: remove station if connection prep fails
A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When Multi-Link Operation MLO connection preparation fails, the system may not correctly remove the associated station. This can lead to a use-after-free or double-free vulnerability in the debugfs component, potentially causing...