40379 matches found
PT-2026-52431
Name of the Vulnerable Software and Affected Versions Post Snippets versions prior to 4.0.20 Description Remote attackers with contributor-level permissions can execute arbitrary code on the server. Recommendations Update Post Snippets to version 4.0.20 or later...
PT-2026-52577
Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...
CVE-2026-49277
creationtimestamp| type| source ---|---|--- 2026-06-24 23:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ztnvgtv22...
CVE-2020-14072
creationtimestamp| type| source ---|---|--- 2026-06-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2zrn362b2r...
CVE-2020-14070
creationtimestamp| type| source ---|---|--- 2026-06-24 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2y3yhv3j2h...
CVE-2026-45688
creationtimestamp| type| source ---|---|--- 2026-06-24 22:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2y24ktex2e...
CVE-2026-47733
creationtimestamp| type| source ---|---|--- 2026-06-24 22:29:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xnkkgdz25...
CVE-2026-48720
creationtimestamp| type| source ---|---|--- 2026-06-24 22:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2wyyhzc72i...
CVE-2026-9643
creationtimestamp| type| source ---|---|--- 2026-06-24 22:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2wwgo2wz2d...
CVE-2026-42450
creationtimestamp| type| source ---|---|--- 2026-06-24 22:02:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2w64k4ye2c...
CVE-2026-44016
creationtimestamp| type| source ---|---|--- 2026-06-24 21:57:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2vv5x5om2p 2026-07-20 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2huq63ax2y...
CVE-2026-52811
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Repository.UploadRepoFiles checks for symlinks only on the leaf of the upload target osx.IsSymlinktargetPath. The siblings UpdateRepoFile, DeleteRepoFile, and GetDiffPreview use hasSymlinkInPath, which lstats every component —...
CVE-2026-52811 Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Repository.UploadRepoFiles checks for symlinks only on the leaf of the upload target osx.IsSymlinktargetPath. The siblings UpdateRepoFile, DeleteRepoFile, and GetDiffPreview use hasSymlinkInPath, which lstats every component —...
CVE-2026-53946
Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user...
CVE-2026-53128
creationtimestamp| type| source ---|---|--- 2026-06-24 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2l6ivx4f2c 2026-07-06 06:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:26:10+00:00| seen...
CVE-2026-53125
creationtimestamp| type| source ---|---|--- 2026-06-24 18:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kvkeajd2o 2026-07-23 21:23:35+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrj7lafh2x...
EUVD-2026-38905
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hidpostreset You can build a USB device that includes a HID component and a storage or UAS component. The components can be reset only together. That means that hidprereset and hidpostreset are in the...
CVE-2026-53115
creationtimestamp| type| source ---|---|--- 2026-06-24 18:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2k3sr5yk2o...