CVE-2026-66033

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...

DEBIAN-CVE-2026-64209

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

Am I affected You are affected if all of the following hold: - You run a better-auth version below 1.6.22, or a 1.7.0-beta below 1.7.0-beta.10. - You enable the magic-link plugin or the email-OTP plugin. - You also enable email and password sign-up with open registration. - An account can exist a...

Insufficient Verification of Data Authenticity

Overview better-auth is a The most comprehensive authentication library for TypeScript. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the authentication process. An attacker can gain persistent unauthorized access to user accounts by...

GHSA-QQ9H-G4JM-XGF3 Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

Am I affected You are affected if all of the following hold: - You run a better-auth version below 1.6.22, or a 1.7.0-beta below 1.7.0-beta.10. - You enable the magic-link plugin or the email-OTP plugin. - You also enable email and password sign-up with open registration. - An account can exist a...

NPM: Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

NPM: Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in vulnerability discovered by ? in WordPress Npm better-auth versions = 1.1.3, 1.6.22...

CVE-2026-64208 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AFRXRPC to make use of this to...

CVE-2026-64209 phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

CVE-2026-64208

Summary : CVE-2026-64208 affects the Linux kernel’s crypto/krb5 and AF_RXRPC path. The root cause was missing pre-decrypt/pre-verify length checks, now fixed by updating the krb5 crypto library to provide facilities for prechecking message length and by applying this in AF_RXRPC to validate DATA ...

CVE-2026-64209

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

CVE-2026-64208

In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AFRXRPC to make use of this to...

Exploit for CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filter...

Exploit for SQL Injection in Wordpress

CVE-2026-63030 & CVE-2026-60137 — wp2shell WordPress Cor...

Exploit for Relative Path Traversal in Microsoft

CVE-2025-53779: Microsoft Windows Kerberos Authentication Bypa...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Exe...

Exploit for Command Injection in Paloaltonetworks Pan-Os

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injectio...

PT-2026-64382

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A pre-authentication heap buffer overflow occurs during Encrypt-then-MAC ETM cipher negotiation. A malicious SSH server can corrupt heap metadata in a connecting client by sending a packet where the...

PT-2026-67476

Summary A malicious SSH server can crash a russh client session with a single malformed key-exchange reply, causing a pre-authentication Denial-of-Service before the server host key is verified. The embedding process itself stays up, but the connection is killed deterministically. Details Every...

PT-2026-64323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The krb5 crypto library lacks facilities to precheck the length of messages before they are decrypted or verified. This issue affects AF RXRPC when validating DATA packets secured with...

PT-2026-64380

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A pre-authentication integer underflow exists in the ssh2 cipher crypt function within src/openssl.c. A malicious SSH server can trigger this issue during the handshake by negotiating AES-GCM cipher...