CVE-2026-47770

creationtimestamp| type| source ---|---|--- 2026-06-25 18:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ieq6bl2u...

CVE-2026-50021

creationtimestamp| type| source ---|---|--- 2026-06-25 18:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52ap4dzc2z 2026-06-27 00:35:37+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-q6j5-fjx5-2mc3...

CVE-2026-55180

creationtimestamp| type| source ---|---|--- 2026-06-25 18:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zolmti52o 2026-06-27 00:35:17+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-3qhv-2rgh-x77r 2026-06-29 23:02:17+00:00| seen|...

CVE-2026-56768 Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

EUVD-2026-39520

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-56768 Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-56768

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-56768

Vulnerability summary (CVE-2026-56768) Seahub versions before 13.0.23 fail to enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated access when a folder share-link token is present. An attacker can call the GET endpoint to obtain a fileserver zip token ...

CVE-2026-56768 Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method

Seahub before 13.0.23 does not enforce SHARELINKLOGINREQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory...

CVE-2026-48995

creationtimestamp| type| source ---|---|--- 2026-06-25 18:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s 2026-06-26 22:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp 2026-06-29 22:43:27+00:00| seen|...

CVE-2026-49839

creationtimestamp| type| source ---|---|--- 2026-06-25 17:55:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yt3of422z...

CVE-2026-50017

creationtimestamp| type| source ---|---|--- 2026-06-25 17:52:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yn7uldp2j...

CVE-2026-54097

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.6, a low-privileged authenticated user of filebrowser with create + delete permissions in their own isolated scope can silently destroy share-link...

Improper Encoding or Escaping of Output

Overview justhtml is an A pure Python HTML5 parser that just works. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the tomarkdown process. An attacker can inject malicious HTML or script into rendered Markdown by including a blank line within the te...

Exploit for OS Command Injection in Tp-Link Tl-Wr802N_Firmware

CVE-2026-3227: TP-Link Router OS Command Injection !CVEhtt...

CVE-2026-9184

creationtimestamp| type| source ---|---|--- 2026-06-25 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4tbneuuh2p...

CVE-2026-56122

creationtimestamp| type| source ---|---|--- 2026-06-25 16:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4shoopn42j...

CVE-2026-54842

creationtimestamp| type| source ---|---|--- 2026-06-25 15:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rvrpi3o2j...

CVE-2026-54836

creationtimestamp| type| source ---|---|--- 2026-06-25 15:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qf6ns552t 2026-07-21 06:00:07+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml 2026-07-22...

CVE-2026-54822

creationtimestamp| type| source ---|---|--- 2026-06-25 15:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qap4vhl2e 2026-06-29 12:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpghq55ty32i...