12967 matches found
CVE-2026-8982
creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6smnnedl2e 2026-07-21 22:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uxxgmvf23...
GHSA-2P49-HGCM-8545 SVGO removeScripts plugin leaves some executable scripts intact
Summary SVGO's removeScripts plugin disabled by default removes scripts from the SVG, however executable scripts were left intact in some cases. If a consumer relied on this plugin for sanitization and served them to users, these SVGs could open up doors to XSS. Details SVGO has a plugin for...
CVE-2026-15342 CVE-2026-15342
Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The affected endpoints return presigned...
CVE-2026-28317
creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...
CVE-2026-47390 PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, spidertools URL validation can be bypassed using alternate loopback host encodings. The tool contains a URL validation function intended to block local or unsafe...
SUSE CVE-2026-64057
In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afsgetlink The afs filesystem in the kernel doesn't do locking correctly for symbolic links. There are a number of problems: 1 It doesn't do any locking around afsreadsingle to prevent races between...
SUSE CVE-2026-64115
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmcitransportrecvconnectingserver returned err = 0 for a peer RST in its default switch arm: err = pkt-type == VMCITRANSPORTPACKETTYPERST ? 0 : -EINVAL; That made...
CVE-2025-43350
creationtimestamp| type| source ---|---|--- 2026-07-21 07:00:04+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:28+00:00| seen| https://t.me/novnow/1294016 2026-07-22 00:00:29+00:00| seen| https://t.me/novnow/1294032...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
DEBIAN-CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812
CVE-2026-15812 affects kronosnet (
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
EUVD-2026-46152
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
📄 WordPress Exact Links 3.0.7 Unauthenticated Blind SQL Injection
WordPress Exact Links URL Shortener plugin version 3.0.7 contains an unauthenticated time-based blind SQL injection vulnerability through REST. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit...
Linux Distros Unpatched Vulnerability : CVE-2026-15812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured t...
PT-2026-61829
Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35 Description An issue exists in the internal Access Control List ACL subsystem. When the framework is configured to manage dynamic links to accept network traffic from any IP address without network payload...
CVE-2026-57859
creationtimestamp| type| source ---|---|--- 2026-07-20 23:39:51+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f 2026-07-21 00:00:00+00:00| seen| https://gist.github.com/sermikr0/6f68b5bcfc1024269f1cd032abb55a0f...