72638 matches found
CVE-2026-15320
creationtimestamp| type| source ---|---|--- 2026-07-10 04:12:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbbtacgfd2z 2026-07-10 05:37:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgmeopem2z...
GHSA-2P26-P43X-FHP8
creationtimestamp| type| source ---|---|--- 2026-07-10 03:12:06+00:00| seen| https://gist.github.com/alon710/e074ac5405ee20f6dd8bded11414265c...
GHSA-H74C-Q9J7-MPCM
creationtimestamp| type| source ---|---|--- 2026-07-10 01:12:43+00:00| seen| https://gist.github.com/alon710/c57bf8187a7fb4d8c5e9247f7948a17b...
CVE-2026-59828
creationtimestamp| type| source ---|---|--- 2026-07-10 00:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqawjvldsi2e...
CVE-2026-59854
creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqavozsbt62e...
CVE-2026-59856
creationtimestamp| type| source ---|---|--- 2026-07-10 00:25:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqav54u5hg2k 2026-07-11 13:22:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqeqzu455g27 2026-07-11 13:23:28+00:00| seen|...
CVE-2026-57501
creationtimestamp| type| source ---|---|--- 2026-07-10 00:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqauir5pl727...
GHSA-QCQ2-496W-V96P
creationtimestamp| type| source ---|---|--- 2026-07-10 00:11:47+00:00| seen| https://gist.github.com/alon710/ac77807be35ab79d5b8543a7caac77a2...
CVE-2026-59831
creationtimestamp| type| source ---|---|--- 2026-07-10 00:10:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaudf4ihv2l...
PT-2026-57331
Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Forgery SSRF vulnerability in URL preview functionality in UrlPreviewService. Due to missing network restrictions before establishing outbound connections, a remote attacker can...
VulnCheck KEV: CVE-2026-45586
Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...
ROS-20260710-73-0031
The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-57324
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
CVE-2026-55187: Server-Side Request Forgery (SSRF)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
The vulnerability of the fc_do_one_pass() function in the fs/jbd2/recovery.c file of the Linux kernel operating system allows a attacker to cause a service failure.
The vulnerability of the fcdoonepass function in the fs/jbd2/recovery.c file of the Linux kernel operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-57165
The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can host a malicious web page that, when visited by an...
CVE-2026-12598
creationtimestamp| type| source ---|---|--- 2026-07-09 23:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatkxb6dv26 2026-07-10 02:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2gy4ouu2i...
CVE-2026-12597
creationtimestamp| type| source ---|---|--- 2026-07-09 23:53:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatesas4f26 2026-07-10 02:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb2grdnhv2c...
GHSA-QCQ2-496W-V96P Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately On² behavior in parselinktext. A relatively small input consisting of repeated characters causes significant parsing slowdown. Affected component mistune/inlineparser.py → parselinktext Description When parsing...
