GHSA-CGFV-JRFP-2R7V

creationtimestamp| type| source ---|---|--- 2026-07-07 00:41:49+00:00| seen| https://gist.github.com/alon710/031e4a60a1dad95089a914b9f0b56e00...

CVE-2026-42204

creationtimestamp| type| source ---|---|--- 2026-07-07 00:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzejfdhmj2y...

CVE-2026-43925

creationtimestamp| type| source ---|---|--- 2026-07-07 00:29:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdyralas2y...

CVE-2026-42153

creationtimestamp| type| source ---|---|--- 2026-07-07 00:08:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcrlu7h72y...

CVE-2026-53644

creationtimestamp| type| source ---|---|--- 2026-07-07 00:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcoa7h4v23...

CVE-2026-43918

creationtimestamp| type| source ---|---|--- 2026-07-07 00:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcl2utc32j...

GHSA-47FR-JW86-C3FJ

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...

GHSA-V64M-XXFW-HRV6

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgdgwvk2h...

GHSA-72J9-356V-88XQ

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgcfkjb2s...

ROS-20260707-73-0005

The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user opens a specially crafted link...

PT-2026-56244

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...

CVE-2026-14904: Improper Link Resolution Before File Access

AWS Research and Engineering Studio RES is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue CWE-59 in the Auth.GetUserPrivateKey API. An authenticated remot...

PT-2026-56249

Name of the Vulnerable Software and Affected Versions Dashy versions prior to 4.3.7 Description The workspace view fails to validate the scheme of the URL query parameter before assigning it to an iframe source. This allows an attacker to execute JavaScript on the Dashy origin by tricking a...

The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260707-73-0004

The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user opens a specially crafted link...

PT-2026-56300

Name of the Vulnerable Software and Affected Versions Better Auth versions prior to 1.6.11 Description Better Auth contains a pre-account hijacking flaw where the OAuth callback auto-link gate in the handleOAuthUserInfo function allows implicit account linking if the OAuth provider asserts email...

CVE-2026-50529: Incorrect Authorization

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...

PT-2026-56254

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The ShareSecretManage component uses a hardcoded default share link signature key. An attacker who obtains a passwordless share for a resource and user can use the known key link-pwd-fit2cloud to...

CVE-2026-55500

creationtimestamp| type| source ---|---|--- 2026-07-06 22:32:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz5g2pefd23 2026-07-10 15:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjavfcqz24 2026-07-10 17:00:40+00:00| seen|...

GHSA-473P-56XX-VG67 Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

Summary In Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...