CVE-2026-11410

The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...

GHSA-C6MH-FPJC-4PR3 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

Summary A vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. Details The fix for CVE-2024-38519 enforced an allowlist for file extensions, in orde...

GHSA-365W-HQF6-VXFG

creationtimestamp| type| source ---|---|--- 2026-06-16 20:51:26+00:00| seen| https://gist.github.com/alon710/e1deec66b2e7d16cb3f78258fba2c87d...

CVE-2026-48777

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta are vulnerable to Path Traversal through the publicPatchHandler in backend/http/public.go which joins user-controlled fromPath and toPath body fields with the trusted...

kernel: wifi: mac80211: remove station if connection prep fails

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When Multi-Link Operation MLO connection preparation fails, the system may not correctly remove the associated station. This can lead to a use-after-free or double-free vulnerability in the debugfs component, potentially causing...

EUVD-2026-37207

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta are vulnerable to Path Traversal through the publicPatchHandler in backend/http/public.go which joins user-controlled fromPath and toPath body fields with the trusted...

kernel: wifi: mac80211: remove station if connection prep fails

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When Multi-Link Operation MLO connection preparation fails, the system may not correctly remove the associated station. This can lead to a use-after-free or double-free vulnerability in the debugfs component, potentially causing...

CVE-2024-38487

creationtimestamp| type| source ---|---|--- 2026-06-16 18:18:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogfvsfgfv25...

CVE-2024-30476

creationtimestamp| type| source ---|---|--- 2026-06-16 18:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogfkgpwxi2m...

CVE-2026-39471

creationtimestamp| type| source ---|---|--- 2026-06-16 17:10:15+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mogc45pvkc2a...

GHSA-G75F-G53V-794X

creationtimestamp| type| source ---|---|--- 2026-06-16 16:41:37+00:00| seen| https://gist.github.com/alon710/5922ad26f6aa39fcda791f945c3402e2...

GHSA-GR75-JV2W-4656

creationtimestamp| type| source ---|---|--- 2026-06-16 16:11:24+00:00| seen| https://gist.github.com/alon710/c44712b7c2bb082240930f6c62996619...

CVE-2026-46448

creationtimestamp| type| source ---|---|--- 2026-06-16 16:02:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mog6cuxxtf2w...

CVE-2026-12398

creationtimestamp| type| source ---|---|--- 2026-06-16 16:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mog67nrzov2c...

CVE-2026-12320

creationtimestamp| type| source ---|---|--- 2026-06-16 14:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mog26jqfxo2c 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-12318

creationtimestamp| type| source ---|---|--- 2026-06-16 14:43:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofzvlccki2l 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

EUVD-2026-35675

Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability...

CVE-2026-12326

creationtimestamp| type| source ---|---|--- 2026-06-16 14:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofz3ymu6a2h 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-12315

creationtimestamp| type| source ---|---|--- 2026-06-16 14:18:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofyjw6qli2j 2026-06-17 04:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohggze6kf2y 2026-06-17 20:00:00+00:00| seen|...

CVE-2026-12314

creationtimestamp| type| source ---|---|--- 2026-06-16 14:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofyezrli32v 2026-06-17 03:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd4ahicu27 2026-06-17 20:00:00+00:00| seen|...