The vulnerability in the script /cgi-bin/gui_mgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the script /cgi-bin/guimgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 is related to buffer overfl...

Linux Distros Unpatched Vulnerability : CVE-2026-58203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a...

PT-2026-56920

Name of the Vulnerable Software and Affected Versions D-link DIR-823G version 1.0.2B05 20181207 Description A weakness exists in the Web Interface component within the /etc/boa/boa.conf file. A remote attacker can perform a manipulation that leads to a least privilege violation. This attack is...

CVE-2026-49276: Improper Neutralization of Script in Attributes in a Web Page

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the writer field in any blueprint allowed a scripting link to be included as the target of a link or email link in writer mark components, making the target clickable by the user who entered it and...

CVE-2026-58210

creationtimestamp| type| source ---|---|--- 2026-07-08 23:10:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq6ai44tz62n...

CVE-2026-54590

creationtimestamp| type| source ---|---|--- 2026-07-08 22:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67v3wjmr2z 2026-07-20 09:53:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t 2026-07-20 09:53:36+00:00| seen|...

CVE-2026-8649

creationtimestamp| type| source ---|---|--- 2026-07-08 22:54:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq67m5hson27 2026-07-10 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwa2beha2f 2026-07-11 01:47:04+00:00| seen|...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview yt-dlp is an A youtube-dl fork with additional features and patches Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via improper validation of input in the --write-link, --write-url-link,...

CVE-2026-55596

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66jmihnl27 2026-08-25 17:32:46+00:00| seen| https://gist.github.com/alon710/fe6f5c87f44e8737a1f8abea57fa2cd5 2026-08-25 18:35:09+00:00| published-proof-of-concept|...

CVE-2026-58208

creationtimestamp| type| source ---|---|--- 2026-07-08 22:19:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65o5u3x42x 2026-07-11 10:25:23+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqeh56pdjb27 2026-07-11 10:25:25+00:00| seen|...

CVE-2026-8801

creationtimestamp| type| source ---|---|--- 2026-07-08 22:13:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65cl2ju42g 2026-07-09 19:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqaeg6yw7v2h 2026-07-10 19:56:03+00:00| seen|...

GHSA-VMWX-M75V-QVCH

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:23+00:00| seen| https://gist.github.com/alon710/f5073530cad3dd719e641dcee2ba88b8...

CVE-2026-59935

creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq64xsux7c24 2026-07-10 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbllqmplz25...

CVE-2017-17990

creationtimestamp| type| source ---|---|--- 2026-07-08 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq64x7paqs2k...

CVE-2026-60105

creationtimestamp| type| source ---|---|--- 2026-07-08 22:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mq64ms7gqd2w 2026-07-09 09:14:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq7cadytwy26 2026-07-11 00:30:32+00:00| seen|...

CVE-2026-59879

creationtimestamp| type| source ---|---|--- 2026-07-08 21:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i 2026-07-11 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n...

GHSA-37H2-6P4F-MP3Q

creationtimestamp| type| source ---|---|--- 2026-07-08 21:42:03+00:00| seen| https://gist.github.com/alon710/faf458b17f73f7d92e775ebdde2a6b10...

CVE-2026-59936

creationtimestamp| type| source ---|---|--- 2026-07-08 21:36:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq637k3iih2w 2026-07-10 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbnbfawqa2n 2026-07-10 07:43:10+00:00| seen|...

CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

Malicious code in tslint-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b464b1646f8e2d36ce68a86af599cc49d5381f08af70302ff01f42957234a1 The package presents itself as the pino logger README, index.d.ts, docs/, and lib/ files all reference pinojs/pino but is published under the unrelat...