CVE-2026-12821

creationtimestamp| type| source ---|---|--- 2026-06-22 02:06:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motsggm7y42n...

CVE-2026-12813

creationtimestamp| type| source ---|---|--- 2026-06-22 01:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motrs2yyt62s...

CVE-2026-12812

creationtimestamp| type| source ---|---|--- 2026-06-22 01:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motrhsljy52n...

The vulnerability in the webfile_mgrc.ipl software for D-Link DNS-320 allows a hacker to execute arbitrary commands.

The vulnerability in the webfilemgrc.cgi script of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

PT-2026-51378

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 2605 Description An improper link resolution before file access allows a low privileged attacker with local access to potentially gain unauthorized access. Recommendations Update to version 2605 or...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1868 advisory. Improper authorization in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-45490 Improper link resolution before file access 'link following' in .NET allows an...

PT-2026-51371

Name of the Vulnerable Software and Affected Versions TP-Link routers affected versions not specified Description Insufficient validation of externally supplied DHCP option data in the DHCP option processing logic allows an adjacent, unauthenticated attacker to execute arbitrary commands with...

GHSA-MH64-PH39-MRC9

creationtimestamp| type| source ---|---|--- 2026-06-21 20:11:16+00:00| seen| https://gist.github.com/alon710/c5b3f5c6eff1ab2b8225ee8d2a46e1e8...

CVE-2026-56404

creationtimestamp| type| source ---|---|--- 2026-06-21 18:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosypq3crw22 2026-06-26 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncaeykp26...

CVE-2026-56410

creationtimestamp| type| source ---|---|--- 2026-06-21 17:52:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moswsrivk52n 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...

CVE-2026-56384

Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user without permission to view a target private asset can call the endpoint with an attacker-controlled assetId and receive preview HTML containing a signed fallback transform preview...

CVE-2026-49287

creationtimestamp| type| source ---|---|--- 2026-06-21 14:02:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mosjwafv3w2c...

CVE-2026-12796

creationtimestamp| type| source ---|---|--- 2026-06-21 14:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mosjszfxgj2c...

CVE-2026-56384

Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user without permission to view a target private asset can call the endpoint with an attacker-controlled assetId and receive preview HTML containing a signed fallback transform preview...

CVE-2026-12778

creationtimestamp| type| source ---|---|--- 2026-06-21 08:12:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morwedwvx32x 2026-06-22 12:39:57+00:00| seen| https://www.acn.gov.it/portale/w/aomei-disponibili-poc-pubblici-per-le-cve-2026-12778-cve-2026-12779-e-cve-2026-12780...

CVE-2026-12770

creationtimestamp| type| source ---|---|--- 2026-06-21 03:59:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3morib5g34w2r...

PT-2026-51268

In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...

CVE-2026-56347

creationtimestamp| type| source ---|---|--- 2026-06-20 20:57:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqqmlymxy2i...

CVE-2026-56347

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site...

CVE-2026-54665

creationtimestamp| type| source ---|---|--- 2026-06-20 17:50:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moqg7lyhop2q 2026-06-22 12:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouuauis2z25...