CVE-2026-16406

creationtimestamp| type| source ---|---|--- 2026-07-21 14:05:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5y4uciwk24 2026-07-21 20:58:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p5tarqm2k 2026-07-22 04:47:48+00:00| seen|...

CVE-2026-16399

creationtimestamp| type| source ---|---|--- 2026-07-21 13:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xc7peii2o 2026-07-22 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

EUVD-2026-46258

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447

CVE-2026-16447 concerns a vulnerability in the D-Link DNS-320 1.0.2 where the argument Filedata[] in /web/jquery/uploader/multi_uploadify.php can be manipulated to achieve unrestricted upload. Remote exploitation is possible according to the provided records. The affected component is a server-si...

SUSE CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

vulnerabilities present in Microsoft Office

Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...

EUVD-2026-46186

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 through 11052026...

GHSA-F4GW-2P7V-4548

creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:41+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6mivxy24 2026-08-12 12:01:31+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gkmrec2t...

CVE-2026-54370

creationtimestamp| type| source ---|---|--- 2026-07-21 12:01:17+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5uytuq2r 2026-07-30 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrufedkcaz2i...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-15370

creationtimestamp| type| source ---|---|--- 2026-07-21 10:24:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i...

CVE-2026-13694

creationtimestamp| type| source ---|---|--- 2026-07-21 09:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kag5gbv2e...

CVE-2026-15305

creationtimestamp| type| source ---|---|--- 2026-07-21 08:55:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5grm6cjl2z 2026-08-18 12:15:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mte6z4psi72h...

GHSA-PG7V-JWJ7-P798

creationtimestamp| type| source ---|---|--- 2026-07-21 08:31:39+00:00| seen| https://gist.github.com/alon710/afd430e951c08264a9a3f3da451132a3...

BIT-ARGO-CD-2026-45738 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/ annotations whose pipe-separated values are rendered by...

GHSA-VJC4-5QP5-M44J

creationtimestamp| type| source ---|---|--- 2026-07-21 07:31:35+00:00| seen| https://gist.github.com/alon710/796ee0a4078a7a835fdac3bedcdff5ad...

CVE-2026-6952

creationtimestamp| type| source ---|---|--- 2026-07-21 06:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr567bvu472a...

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

DEBIAN-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...