CVE-2026-44925

Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...

Microsoft Defender 后置链接漏洞

Microsoft Defender is a threat protection software developed by the American company Microsoft. Microsoft Defender has a postback link vulnerability, which stems from improper link resolution before file access. This vulnerability could allow authorized attackers to gain local privileges...

PT-2026-45152

Name of the Vulnerable Software and Affected Versions RT versions 6.0.0 through 6.0.2 Description An issue exists where an authenticated user can be induced to visit a crafted URL, allowing an attacker to execute arbitrary JavaScript within the user's browser session via reflected Cross-Site...

PT-2026-42159

Name of the Vulnerable Software and Affected Versions Windows Admin Center in Azure Portal affected versions not specified Description Improper access control and incorrect link resolution before file access, known as link following, allows an authorized attacker to elevate privileges both locall...

CVE-2026-44925

CVE-2026-44925 describes a Cross-Site Request Forgery (CSRF) in InfoScale v.9.1.3 Operations Manager (VIOM). The vulnerability arises from an ability for an attacker to coerce an active VIOM session user into clicking a crafted HTML link, resulting in unintended modifications within the VIOM web ...

Microsoft Defender Link Following Vulnerability

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-43335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icclinknodes The change to dynam...

PT-2026-42370

monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...

CVE-2025-57798

creationtimestamp| type| source ---|---|--- 2026-05-19 23:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmajtpw52s2k...

CVE-2023-7345

creationtimestamp| type| source ---|---|--- 2026-05-19 22:59:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaiki2yt62c...

CVE-2026-32739

creationtimestamp| type| source ---|---|--- 2026-05-19 22:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmai2aofa52p...

CVE-2026-39250

creationtimestamp| type| source ---|---|--- 2026-05-19 22:32:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmah35t7tn2r...

CVE-2026-8492

The CVE-2026-8492 issue concerns the GTranslate/Translate Drupal module for Drupal, where a MAID vulnerability allows Resource Location Spoofing. The root cause is inadequate validation in the module’s language-switcher widget JavaScript, specifically around document.currentScript, which can caus...

CVE-2026-8492 Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

Modification of Assumed-Immutable Data MAID vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-41470

creationtimestamp| type| source ---|---|--- 2026-05-19 21:18:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmacvwwmpk2o...

CVE-2026-36827

creationtimestamp| type| source ---|---|--- 2026-05-19 20:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaah3kxw22p...

CVE-2026-6009

creationtimestamp| type| source ---|---|--- 2026-05-19 20:14:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mma7dep22x2r...

CVE-2026-42526

creationtimestamp| type| source ---|---|--- 2026-05-19 19:29:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mma4tie6mk25 2026-05-19 22:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmahaomavt2t 2026-07-03 07:30:42+00:00| seen|...