CVE-2026-56769

creationtimestamp| type| source ---|---|--- 2026-06-25 23:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5k4slih62z...

CVE-2026-56771

creationtimestamp| type| source ---|---|--- 2026-06-25 22:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jtglqfg27...

GO-2026-5688 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit

Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the file processing mechanism. An attacker can write arbitrary files to the filesystem by exploiting a case-insensitive bypass and missing checks for HardLink/SymLink tags. Remediation Upgrade...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the file processing mechanism. An attacker can write arbitrary files to the filesystem by exploiting a case-insensitive bypass and missing checks for HardLink/SymLink tags. Remediation There is no fixed version for...

GO-2026-5418 Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd

Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation in github.com/argoproj/argo-cd...

GO-2026-5507 Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server

Mattermost has session spoofing due to lack of single-use consumption of guest magic link tokens enforcement in github.com/mattermost/mattermost-server...

CVE-2018-9148

creationtimestamp| type| source ---|---|--- 2026-06-25 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5gvakeg62n...

CVE-2026-6450

creationtimestamp| type| source ---|---|--- 2026-06-25 22:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5golcu3b2a...

CVE-2026-6412

creationtimestamp| type| source ---|---|--- 2026-06-25 21:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gh4hh4627...

CVE-2026-6331

creationtimestamp| type| source ---|---|--- 2026-06-25 21:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gdqrqws2u...

CVE-2026-55962

creationtimestamp| type| source ---|---|--- 2026-06-25 21:50:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5fy2nkfc2s...

CVE-2018-3822

creationtimestamp| type| source ---|---|--- 2026-06-25 21:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5f7moukh2r...

CVE-2026-5460

creationtimestamp| type| source ---|---|--- 2026-06-25 21:00:16+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp5d5qsu5t2a...

Exploit for Path Traversal in Tp-Link Tapo_C260_Firmware

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-...

Malicious code in textshape-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e596e1ea1365aadfa6c75047b664bb41b29b60828595b9271d4c2c217476b60 The package presents itself as a Tailwind CSS typography plugin its name, description, and source tree clone @tailwindcss/typography, but src/index.j...

MAL-2026-6475 Malicious code in textshape-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e596e1ea1365aadfa6c75047b664bb41b29b60828595b9271d4c2c217476b60 The package presents itself as a Tailwind CSS typography plugin its name, description, and source tree clone @tailwindcss/typography, but src/index.j...

CVE-2017-14877

creationtimestamp| type| source ---|---|--- 2026-06-25 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5a6ozavk2n...

CVE-2026-56768

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-54096

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, POST /api/share/ accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target fi...