CVE-2026-9153

creationtimestamp| type| source ---|---|--- 2026-06-25 02:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3et5rs4b2l...

CVE-2026-9784

creationtimestamp| type| source ---|---|--- 2026-06-25 01:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3d4twjis25 2026-06-30 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjk52nhe42g...

CVE-2026-54158

creationtimestamp| type| source ---|---|--- 2026-06-25 01:47:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cq5vxrr2t 2026-06-25 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3lttwe2q2w 2026-06-25 04:30:32+00:00| seen|...

CVE-2020-15322

creationtimestamp| type| source ---|---|--- 2026-06-25 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp36sknzvj2y...

EUVD-2026-39100

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

Tiptap contains an input validation vulnerability resulting in DoS

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

GHSA-4595-7FJW-R3JH Tiptap contains an input validation vulnerability resulting in DoS

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri functio...

GHSA-PJJP-65R7-PPGM

creationtimestamp| type| source ---|---|--- 2026-06-25 00:01:29+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp34su7fvx26...

PT-2026-52542

Seahub before 13.0.23 does not enforce SHARE LINK LOGIN REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-50549: Improper Link Resolution Before File Access

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the agent canonicalizes the target path to confirm it stays inside the workspace, but when canonicalization fails it falls back to the original path an...

CVE-2026-54821: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in Visual Link Preview = 2.3.1 versions...

PT-2026-52410

Name of the Vulnerable Software and Affected Versions Visual Link Preview versions 2.3.1 and earlier Description Subscriber sensitive data exposure occurs in the software, potentially allowing unauthorized access to private information. Recommendations Disable or isolate the software immediately...

CVE-2026-56768: Missing Authorization

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

Linux Distros Unpatched Vulnerability : CVE-2026-49851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear approximately O...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following through the WriteToCachedFile function when handling network cache files in certain configurations. An attacker can overwrite specific host files and change their ownership by planting a symbolic lin...

CVE-2026-54097: Authorization Bypass Through User-Controlled Key

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, a low-privileged authenticated user of filebrowser with create + delete permissions in their own isolated scope can silently destroy share-link...

GitLab 8.3 < 18.11.6 / 19.0 < 19.0.3 / 19.1 < 19.1.1 (CVE-2026-12635)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an...

Xilinx AXIEthernet Driver Linux Information Disclosure

The vulnerability of Xilinx AXIEthernet driver for the Linux operating system is related to a violation of the count of links to pages displayed in memory. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...

CVE-2026-13208

creationtimestamp| type| source ---|---|--- 2026-06-24 23:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp32fkx4mk25...

Improper Handling of Unexpected Data Type

Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type via the Link::isAllowedUri function when processing Tiptap JSON containing an attrs.href field set to an array instead of a string. An attacker can cause persistent server-side crashes by...