PT-2026-60922

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function normalize rw path of the file astrbot/core/tools/computer tools/fs.py of the component Filesystem Computer-Use Tool. Performing a manipulation results in link following. The attack is only possible with local...

CVE-2026-54243

creationtimestamp| type| source ---|---|--- 2026-07-17 23:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwyzxvhl2b...

CVE-2026-14499

creationtimestamp| type| source ---|---|--- 2026-07-17 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqpmiqc62q 2026-07-18 19:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6ili462d 2026-07-21 10:37:07+00:00| seen|...

CVE-2026-13446

creationtimestamp| type| source ---|---|--- 2026-07-17 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojgqxle2i 2026-07-18 09:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqvvo465ey2n 2026-07-18 09:00:38+00:00| seen|...

CVE-2026-63030

creationtimestamp| type| source ---|---|--- 2026-07-17 21:19:56+00:00| seen| https://chaos.social/users/christopherkunz/statuses/116937404931312120 2026-07-17 22:19:07+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3mqursxmdqy2o 2026-07-17 22:53:06+00:00| seen|...

CVE-2026-45309

creationtimestamp| type| source ---|---|--- 2026-07-17 20:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqumbgbfoa27...

CVE-2026-8859

creationtimestamp| type| source ---|---|--- 2026-07-17 20:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulmi3kxg2e 2026-07-17 22:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqusj4xzp62g 2026-07-18 12:00:55+00:00| seen|...

CVE-2026-8505

creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulivjdmi24 2026-07-17 22:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mququiyq3u2s 2026-07-18 10:30:29+00:00| seen|...

CVE-2026-48487

creationtimestamp| type| source ---|---|--- 2026-07-17 20:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulgkrrgf22...

CVE-2026-60137

creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbqes2k2a 2026-07-17 21:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqd5kxgq2i 2026-07-17 22:19:07+00:00| seen|...

CVE-2026-8481

creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbowbpo2v 2026-07-17 22:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqut2zsykr24 2026-07-18 14:01:40+00:00| seen|...

CVE-2026-3031

creationtimestamp| type| source ---|---|--- 2026-07-17 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqul647dyg2v...

CVE-2026-16074 AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery

A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function updateplugin/updateallplugins of the file astrbot/dashboard/routes/plugin.py of the component Plugin Update Handler. The manipulation of the argument downloadurl/downloadurls/proxy results in server-side...

CVE-2026-7754

creationtimestamp| type| source ---|---|--- 2026-07-17 20:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqukdh7xx72x 2026-07-18 15:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtisry42e...

CVE-2026-38752

creationtimestamp| type| source ---|---|--- 2026-07-17 20:03:27+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mquk7oiurt2i...

CVE-2026-47184

creationtimestamp| type| source ---|---|--- 2026-07-17 20:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquk3hsae622...

CVE-2026-49835

creationtimestamp| type| source ---|---|--- 2026-07-17 19:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujrdmq7p2i...

CVE-2026-49834

creationtimestamp| type| source ---|---|--- 2026-07-17 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujodq3y72b...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...