dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

dotnet: .NET: Local file tampering via link following vulnerability

A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...

CVE-2026-20251

creationtimestamp| type| source ---|---|--- 2026-06-10 20:23:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnxk446ell2m 2026-06-11 00:32:43+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3 2026-06-15 01:27:12+00:00| seen|...

CVE-2026-47939

creationtimestamp| type| source ---|---|--- 2026-06-10 20:06:05+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj4zowxe2u...

CVE-2026-9151

creationtimestamp| type| source ---|---|--- 2026-06-10 20:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxivyjrix26...

CVE-2026-50569

creationtimestamp| type| source ---|---|--- 2026-06-10 19:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxie2wmbr24...

CVE-2026-50570

creationtimestamp| type| source ---|---|--- 2026-06-10 19:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxi34cuoo2h...

CVE-2026-46529

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tricking them into clicking a link inside...

CVE-2026-46614

creationtimestamp| type| source ---|---|--- 2026-06-10 19:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhs5smf72i...

CVE-2026-50568

creationtimestamp| type| source ---|---|--- 2026-06-10 19:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhj5i6c42i...

CVE-2026-50638

creationtimestamp| type| source ---|---|--- 2026-06-10 19:23:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxgqgtcdm22...

CVE-2026-46612

creationtimestamp| type| source ---|---|--- 2026-06-10 19:17:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgfz4oop24...

CVE-2026-49822

creationtimestamp| type| source ---|---|--- 2026-06-10 19:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgbtrwgb2e...

CVE-2026-0270

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:20+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmtixdo25 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917...

CVE-2026-0269

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:19+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmsfsr42z 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-07-13 15:14:20+00:00| seen|...

CVE-2026-24067

creationtimestamp| type| source ---|---|--- 2026-06-10 18:04:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnxcdxd5px2v...

CVE-2026-47342

creationtimestamp| type| source ---|---|--- 2026-06-10 17:43:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxb5o5xhv22 2026-06-11 01:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny3lqxsss2l...

CVE-2026-20256 Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could cause data exfiltration through classic...

EUVD-2026-36078

An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration...

CVE-2026-9151

The CVE-2026-9151 entry describes a command-injection in the VPN module of TP-Link Archer routers (AX12 v1, AX17 v1, AX18 v1, AX1300 v1.6). The root cause is improper filtering of special characters, enabling an adjacent, authenticated attacker to inject commands by importing a specially crafted ...