EUVD-2026-53052

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

CVE-2026-68074

Affected product: Apache Qpid Broker-J (through 10.0.1). Vulnerability: pre-authentication resource exhaustion caused by unbounded symbol value caching, leading to denial of service. Root cause: unbounded caching of symbol values allows resource exhaustion under unauthenticated access. Impact: De...

CVE-2026-66257

The CVE-2026-66257 entry applies to Apache Qpid Proton-J up to version 0.34.1. The root cause is unbounded symbol value caching, which allows a pre-authentication attacker to exhaust resources and cause denial of service. The available sources consistently report the impact as resource exhaustion...

CVE-2026-66257 Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

EUVD-2026-53051

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

CVE-2026-66257

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

CVE-2026-66257 Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

MAL-2026-12032 Malicious code in add-two-numbers-x7q9m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550dfc48a74577d95e53fc64cc296a9cc59a5940edb6eac3f191f41376350635 The package advertises itself as a trivial 'add two numbers' utility but its preinstall lifecycle script enumerates the installer's Desktop directory...

EUVD-2026-52976

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file backend/src/baserow/api/twofactorauth/views.py of the component 2FA Verify Endpoint. Such manipulation leads to improper authentication. The attack may be launched remotely. Th...

SUSE CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

CVE-2025-63823

The CVE-2025-63823 entry affects My Safetipin Android Application version 5.2.1, where hardcoded credentials in the authentication module enable remote attackers to bypass authentication and gain unauthorized access to user accounts through predictable OTP values. The root cause is the hardcoded ...

Linux Distros Unpatched Vulnerability : CVE-2026-67314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - axios versions =1.15.2 and 1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling lib/adapters/http.js and...

CVE-2025-70962

CVE-2025-70962 affects Zosi C519M, version V4.2.8.823C01450BA. The issue is Incorrect Access Control due to hardcoded credentials in the RTSP authentication, allowing network-remote access to the RTSP video stream and unauthorized camera viewing. A PoC/exploit is available (GitHub: https://github...

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

Linux Distros Unpatched Vulnerability : CVE-2026-67589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects...

Linux Distros Unpatched Vulnerability : CVE-2026-67590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid...

EUVD-2026-39022

Ghost: Member existence leak via magic link sign-in response...

CVE-2026-18816

Summary : CVE-2026-18816 affects Baserow up to 2.3.2. The vulnerability resides in the 2FA Verify Endpoint, specifically the verify function in backend/src/baserow/api/two_factor_auth/views.py, enabling improper authentication. Impact : Could be exploited remotely; the exploit complexity is descr...

CVE-2026-18816 Baserow 2FA Verify Endpoint views.py verify improper authentication

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file backend/src/baserow/api/twofactorauth/views.py of the component 2FA Verify Endpoint. Such manipulation leads to improper authentication. The attack may be launched remotely. Th...