CVE-2026-54812

creationtimestamp| type| source ---|---|--- 2026-06-17 17:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiuwtpemc27 2026-06-29 17:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpgyimdmh32i...

CVE-2026-35065

creationtimestamp| type| source ---|---|--- 2026-06-17 17:27:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moitk2sat52j 2026-07-01 14:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplqk4xeg52l...

CVE-2026-9679

creationtimestamp| type| source ---|---|--- 2026-06-17 16:59:18+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moirxg7wts2g 2026-06-18 15:59:05+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72nba3o2f 2026-06-23 12:01:41+00:00| seen|...

CVE-2026-48591

CVE-2026-48591 describes a stored cross-site scripting vulnerability in the open-source earmark Markdown library used with Elixir. The issue arises from how Elixir.Earmark.Transform:_make_att1/2 splices attribute values directly between two literal quotes, causing attribute values to be emitted v...

CVE-2026-48591 Stored XSS via unescaped HTML attribute values in earmark

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

CVE-2026-6734

creationtimestamp| type| source ---|---|--- 2026-06-17 16:40:20+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g 2026-06-18 15:59:03+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x 2026-06-19 05:12:21+00:00| seen|...

CVE-2026-20178

A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to...

CVE-2026-20178

The CVE-2026-20178 issue affects the browser-based Cisco Webex App. Root cause: improper input validation of URL parameters in an HTTP request, enabling an unauthenticated, remote attacker to persuade a user to click a crafted URL and be redirected to a malicious webpage. Impact is limited to use...

CVE-2026-9675

creationtimestamp| type| source ---|---|--- 2026-06-17 16:24:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipzi2kmc2g 2026-06-17 19:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyr2plnu2x 2026-06-18 15:59:02+00:00| seen|...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2024-33909

creationtimestamp| type| source ---|---|--- 2026-06-17 15:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moilpmljvs27...

GHSA-8JR5-V98P-W75M

creationtimestamp| type| source ---|---|--- 2026-06-17 14:41:27+00:00| seen| https://gist.github.com/alon710/91c849a1a0fb4322b56402af2c5bb804...

CVE-2026-49107

creationtimestamp| type| source ---|---|--- 2026-06-17 14:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moik3lnzzg2c...

GHSA-664H-GPGQ-H6XX

creationtimestamp| type| source ---|---|--- 2026-06-17 14:31:19+00:00| seen| https://gist.github.com/alon710/b786193466cf6568b5f90f26b1c3038d...

CVE-2026-27429

creationtimestamp| type| source ---|---|--- 2026-06-17 14:10:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moiij5wfno2b...

CVE-2026-54805

creationtimestamp| type| source ---|---|--- 2026-06-17 14:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiidazo7y25...

CVE-2026-52706

creationtimestamp| type| source ---|---|--- 2026-06-17 13:58:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihui2ijg2g...

CVE-2026-49076

creationtimestamp| type| source ---|---|--- 2026-06-17 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihqde3tk2z...

CVE-2026-7850

The WP Magnific Popup WordPress plugin through 1.0 does not properly escape user-controlled link URLs before injecting them into the DOM when displaying image load error messages, allowing authenticated attackers with Author-level access or above to perform Stored Cross-Site Scripting attacks...

CVE-2026-48745

Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted deep link can silently hijack all GPS tracking parameters and redirect telemetry to an attacker-controlled server. The...