72529 matches found
PT-2026-58282
Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-6851: Improper Link Resolution Before File Access
An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...
PT-2026-58660
Heap-based buffer overflow in Universal Plug and Play upnp.dll allows an authorized attacker to elevate privileges locally...
PT-2026-58827
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcp getComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack m...
Security Update for Microsoft .NET Core SDK (July 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...
PT-2026-58203
Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...
PT-2026-58153
Name of the Vulnerable Software and Affected Versions Universal Plug and Play upnp.dll affected versions not specified Description Improper link resolution before file access, also known as link following, occurs in the upnp.dll component. This allows an authorized attacker to disclose informatio...
CVE-2026-50364: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...
CVE-2026-50438: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
PT-2026-57977
Got CVE-2026-61839 on grav cms: https://t.co/C1H94QxrBn...
CVE-2026-50469: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-50526
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-57980
Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...
PT-2026-57934
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read file/write file/edit file of the file tools/fs ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue...
CVE-2026-57215
creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...
CVE-2026-62194
creationtimestamp| type| source ---|---|--- 2026-07-13 23:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkstf3jth2l 2026-07-15 11:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqomz5i76z22...
CVE-2026-62200
creationtimestamp| type| source ---|---|--- 2026-07-13 22:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z 2026-07-15 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626...