65272 matches found
CVE-2026-40717
Dell Monitor driver 1.0.0.0 is affected by an Improper Link Resolution Before File Access ("Link Following") vulnerability. A low-privilege attacker with local access could potentially exploit this to achieve Elevation of Privileges. The connected sources provide the vendor advisory reference but...
EUVD-2026-52396
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-40717
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-68930
creationtimestamp| type| source ---|---|--- 2026-08-03 16:35:03+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-m65r-rprj-r5rg...
GHSA-JHPW-976M-542J
creationtimestamp| type| source ---|---|--- 2026-08-03 16:32:48+00:00| seen| https://gist.github.com/alon710/73fc02db3c552514344a681ca47f8151...
CVE-2026-18508
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...
UBUNTU-CVE-2026-18508
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...
CVE-2026-12935
creationtimestamp| type| source ---|---|--- 2026-08-03 15:16:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3ms6s522ink2x...
CVE-2026-18092
creationtimestamp| type| source ---|---|--- 2026-08-03 14:10:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4tbihl57xlgja 2026-08-07 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msjfvvu7wb2x...
CVE-2026-18601
creationtimestamp| type| source ---|---|--- 2026-08-03 13:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3btsgp2h 2026-08-04 16:00:44+00:00| seen|...
CVE-2026-69082
CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/ endpoint accepted HTTP GET requests for an operation that modified application state. An unauthenticated remote attacker could construct a malicious link or...
CVE-2024-17583
creationtimestamp| type| source ---|---|--- 2026-08-03 10:01:29+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3ms6ajm6jch2l...
CVE-2026-16300
creationtimestamp| type| source ---|---|--- 2026-08-03 09:02:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030756328811295 2026-08-03 16:50:31+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xecb7dh2i...
CVE-2026-16532
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
EUVD-2026-52165
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-16532
The CVE-2026-16532 affects the Link Library WordPress plugin prior to version 7.9.3. The defect stems from improper sanitisation/escaping of a user-supplied value used in a SQL query, enabling unauthenticated SQL injection via the front-end link submission form. Impact is unauthenticated access w...
CVE-2026-59650
creationtimestamp| type| source ---|---|--- 2026-08-03 01:36:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms5e6epot62u 2026-08-03 04:32:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/117029694758734914 2026-08-03 20:56:04+00:00| seen|...
PT-2026-67454
Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...