72544 matches found
CVE-2026-59831
creationtimestamp| type| source ---|---|--- 2026-07-10 00:10:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaudf4ihv2l...
PT-2026-57331
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...
VulnCheck KEV: CVE-2026-45586
Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...
ROS-20260710-73-0031
The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-57165
The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can host a malicious web page that, when visited by an...
CVE-2026-55187: Server-Side Request Forgery (SSRF)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
PT-2026-57324
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
The vulnerability of the fc_do_one_pass() function in the fs/jbd2/recovery.c file of the Linux kernel operating system allows a attacker to cause a service failure.
The vulnerability of the fcdoonepass function in the fs/jbd2/recovery.c file of the Linux kernel operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-12598
creationtimestamp| type| source ---|---|--- 2026-07-09 23:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatkxb6dv26 2026-07-10 02:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2gy4ouu2i...
CVE-2026-12597
creationtimestamp| type| source ---|---|--- 2026-07-09 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatesas4f26 2026-07-10 02:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2grdnhv2c...
EUVD-2026-39007
Mistune: Potential DoS via quadratic-time parsing in parselinktext...
GHSA-QCQ2-496W-V96P Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. A relatively small input consisting of repeated characters causes significant parsing slowdown. Affected component mistune/inlineparser.py → parselinktext Description When parsing...
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. A relatively small input consisting of repeated characters causes significant parsing slowdown. Affected component mistune/inlineparser.py → parselinktext Description When parsing...
CVE-2026-59831
GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...
CVE-2026-8848
creationtimestamp| type| source ---|---|--- 2026-07-09 23:11:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqyjvs3y2d 2026-07-10 05:58:57+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbhrulgss2o...
CVE-2026-7558
creationtimestamp| type| source ---|---|--- 2026-07-09 23:10:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqxvy5mo2c...
CVE-2026-59269
creationtimestamp| type| source ---|---|--- 2026-07-09 23:09:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqupneqf2s 2026-07-10 03:34:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116893578077059959...
CVE-2026-31984
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap4ausyc2w 2026-07-10 17:45:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcpajcdya2s 2026-07-11 07:37:07+00:00| seen|...
CVE-2026-31981
creationtimestamp| type| source ---|---|--- 2026-07-09 22:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqap3mupjq2d 2026-07-10 17:42:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcp37tmox2d...