CVE-2026-44786

creationtimestamp| type| source ---|---|--- 2026-06-13 12:12:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo6a2d7wgh2f...

CVE-2026-54230

creationtimestamp| type| source ---|---|--- 2026-06-13 05:37:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo5jzaofah2d 2026-06-15 14:04:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3modhaiduso2d 2026-06-29 18:19:05+00:00| seen|...

CVE-2026-54164

creationtimestamp| type| source ---|---|--- 2026-06-13 05:28:06+00:00| seen| https://bsky.app/profile/soyuka.me/post/3mo5jhr2ux22s 2026-07-02 11:57:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny46qtik2u 2026-08-07 17:31:49+00:00| seen|...

CVE-2026-54055

A flaw was found in Kitty, a cross-platform GPU-based terminal. A local attacker, specifically a child process running within the terminal, can exploit a Time-of-Check-Time-of-Use TOCTOU race condition in the file transmission protocol. This allows the attacker to create a symbolic link between a...

CVE-2026-54398

creationtimestamp| type| source ---|---|--- 2026-06-13 02:14:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo56n2nt6m2j...

CVE-2026-53836

creationtimestamp| type| source ---|---|--- 2026-06-13 01:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55nx4j3y2q 2026-06-16 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moembwzxqy2m...

CVE-2026-53823

creationtimestamp| type| source ---|---|--- 2026-06-13 01:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo55eypeht2v 2026-06-16 06:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mof52ftlwl2o...

CVE-2026-53868

creationtimestamp| type| source ---|---|--- 2026-06-13 01:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo543qubjy23...

PT-2026-49083

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L version 1.10.01 Description A format string issue exists in the HTTP Handler component within the file '/web/cgi-bin/greece/rhea'. The problem occurs in the snprintf function when the data argument is manipulated, allowing a...

CVE-2026-48165

creationtimestamp| type| source ---|---|--- 2026-06-12 23:12:00+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo4uhdc5ui2o 2026-06-16 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mogqzcvdi22e 2026-07-10 15:57:35+00:00| seen|...

CVE-2026-12129

creationtimestamp| type| source ---|---|--- 2026-06-12 23:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4u3tkkca2p...

CVE-2026-47138

creationtimestamp| type| source ---|---|--- 2026-06-12 21:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4o75lknj2t...

GHSA-5WW9-JG6Q-38R7 File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix

Summary A low-privileged authenticated user of filebrowser with create + delete permissions in their own isolated scope can silently destroy share-link records belonging to any other user — including the administrator — by performing a legitimate DELETE on a file in their own directory whose...

CVE-2026-45011

CVE-2026-45011 affects ApostropheCMS 4.29.0, where a stored XSS can be injected via a javascript: URL in an image widget link. A user with Editor rights can publish the widget, enabling arbitrary JavaScript execution when a viewer clicks the link. Public patch status: at time of publication there...

CVE-2026-45011 Apostrophe has stored XSS via javascript: URL in Image Widget Link

ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability in the image widget functionality. A user with the Editor role can configure an image widget link to use a javascript: URL payload. Because editors have permission to...

GHSA-GV7W-RQVM-QJHR

creationtimestamp| type| source ---|---|--- 2026-06-12 20:38:57+00:00| seen| https://gist.github.com/konard/f83ae7aaab029a650fe9054d8205dac4 2026-06-13 16:40:27+00:00| seen| https://gist.github.com/konard/10edfaf46f7ba58bdd3e22a15167f9bc 2026-06-13 16:54:05+00:00| seen|...

CVE-2026-46700

creationtimestamp| type| source ---|---|--- 2026-06-12 20:16:43+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-3f62-qv96-4p78...

EUVD-2026-35394

TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities...

CVE-2026-47260 Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs

Koel is a free, open-source music streaming solution. Prior to version 9.3.5, Koel validates the podcast feed URL via the SafeUrl rule DNS resolution + public IP check, but the individual episode values extracted from the RSS XML are stored directly into the database without any SSRF validation...

CVE-2026-48059

creationtimestamp| type| source ---|---|--- 2026-06-12 18:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4e52jd2l23 2026-06-15 02:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sjgcn32d...