CVE-2018-25316

creationtimestamp| type| source ---|---|--- 2026-04-29 20:27:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwr3n25e2k 2026-04-29 20:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknyiqt73m2e 2026-05-04 20:07:07+00:00| seen|...

CVE-2018-25314

creationtimestamp| type| source ---|---|--- 2026-04-29 20:25:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwnpzlsb2o 2026-04-29 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxfzyb4u2c...

CVE-2026-1643

creationtimestamp| type| source ---|---|--- 2026-04-29 15:08:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mknevvh7hk2x 2026-04-29 15:08:23+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mknevtys4c2x...

CVE-2026-40560

creationtimestamp| type| source ---|---|--- 2026-04-29 00:38:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkluc4fnnn2x 2026-04-29 00:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkluc5hnxw2k...

Hermes Agent 后置链接漏洞

Hermes Agent is an AI agent tool developed by Nous Research, featuring self-learning capabilities. Version 0.8.0 of Hermes Agent has a post-link vulnerability, which stems from improper handling of the checksensitivepath function in the tools/filetools.py file. This vulnerability may lead to...

CVE-2026-42431

creationtimestamp| type| source ---|---|--- 2026-04-28 20:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfvlw2dx2e 2026-04-28 20:31:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgia46ed2e 2026-04-29 01:00:42+00:00| seen|...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-7321

creationtimestamp| type| source ---|---|--- 2026-04-28 16:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzpt3i4w2n 2026-04-28 17:04:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2x5rxwl2r 2026-04-29 05:55:52+00:00| seen|...

GHSA-3CH2-JXXC-V4XF

creationtimestamp| type| source ---|---|--- 2026-04-28 04:41:41+00:00| seen| https://gist.github.com/beejak/c190bcb8f8b76e8b2200faef11e807d6 2026-04-28 05:20:25+00:00| seen| https://gist.github.com/beejak/235d9793985eef4870d4d4fe221cc6fe...

CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

Outline 安全漏洞

Outline is an open-source knowledge base developed by Outline. Versions of Outline from 0.86.0 to 1.7.0 contained security vulnerabilities. These vulnerabilities were caused by insecure direct object references. When both the collectionId and documentId are provided in a request, the authorizatio...

OpenClaw 后置链接漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 had a post-link vulnerability due to a sandbox escape issue. This vulnerability could allow remote attackers to access arbitrary files by exploiting symbolic links during fil...

📄 Microsoft WinLogon Registry Deletion / Privilege Escalation

This code represents a highly destructive proof of concept targeting Windows WinLogon and Registry access control mechanisms to achieve privilege escalation and system integrity compromise. The exploit is built around abusing Registry symbolic links and session-based Accessibility paths to redire...

JLSEC-2026-279 Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

tl;dr: unprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits for a privileged user or process to copy/backup/mirror users data using --links and --metadata. unprivileged user now owns /etc/sudoers. Summary Insecure handling of symlinks with --links and --metadata i...

CVE-2026-39491

creationtimestamp| type| source ---|---|--- 2026-04-27 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkhh4z3mzy2c 2026-04-27 06:32:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mkhh4zlgt525...

The vulnerability of the application management tools and Flatpak environments relates to the tracking of UNIX-style symbolic links. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the application management tools and Flatpak environments relates to the tracking of symbolic links in UNIX. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and execute arbitrary code...

CVE_REQUESTS_references

CVEREQUESTSr...

[SECURITY] Fedora 44 Update: mupdf-1.27.1-10.fc44

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

CVE-2026-41427 Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clients

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but the OAuth client creation endpoints did not invoke the hook before persisting new clients. Deployments that configured clientPrivileges to restrict...