EUVD-2026-49328

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

CVE-2026-66395

SiYuan Desktop before v3.7.2 is affected by a reflected XSS in the bazaar plugin readme handler that enables RCE via a crafted siyuan:// deep link. An attacker can inject HTML payloads through the plugin name parameter, which render with insertAdjacentHTML in an insecure Electron renderer and gra...

CVE-2026-13332

creationtimestamp| type| source ---|---|--- 2026-07-27 15:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn66bnwxn2u...

CVE-2026-12495

creationtimestamp| type| source ---|---|--- 2026-07-27 14:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2sy6nmo2y 2026-07-28 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrpd7oaini2g 2026-08-13 11:20:18+00:00| seen|...

WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin Simple Link Directory Pro versions = 15.0.6...

GHSA-6PQ5-P7FC-7XHQ

creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-64515

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This vulnerability arises from incorrect handling of Multi-Link Element MLE defragmentation. When a reconf or EPCS Enhanced Power Save MLE is present in a non-transmitted profile, the defragmentation routine uses an incorrect pointe...

CVE-2026-52686

creationtimestamp| type| source ---|---|--- 2026-07-27 06:55:48+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mrmcuzglnkeh...

CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...

CVE-2026-64410

creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc...

CVE-2026-64355

creationtimestamp| type| source ---|---|--- 2026-07-27 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmadft45t2v 2026-08-06 04:49:57+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00|...

CVE-2026-64303

creationtimestamp| type| source ---|---|--- 2026-07-27 06:06:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma4cnjmz2k 2026-08-06 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00|...

CVE-2026-64232

creationtimestamp| type| source ---|---|--- 2026-07-27 06:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrm7v56nxb2k...

CVE-2026-14827 Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...

BIT-DOTNET-SDK-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

BIT-DOTNET-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-49854

creationtimestamp| type| source ---|---|--- 2026-07-27 03:17:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwolwo4i2m...

PT-2026-65105

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

Уязвимость функции iwl_mld_remove_link() модуля drivers/net/wireless/intel/iwlwifi/mld/link.c драйвера адаптеров беспроводной связи Intel ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость функции iwlmldremovelink модуля drivers/net/wireless/intel/iwlwifi/mld/link.c драйвера адаптеров беспроводной связи Intel ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействи...