CVE-2026-28513

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-25188

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 18:35:44+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116206320771074918 2026-03-10 19:07:55+00:00| seen|...

CVE-2026-23669

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 18:49:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116206374174280022 2026-03-10 19:07:55+00:00| seen|...

CVE-2026-23660

creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 18:22:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116206268049523076 2026-03-10 19:15:41+00:00| seen|...

CVE-2025-15576

If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may nonetheless be able to access a shared directory via a nullfs mount, if the administrator has configured one. In this...

CVE-2026-1261

creationtimestamp| type| source ---|---|--- 2026-03-10 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116204413088981046 2026-05-04 08:19:00+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mkzaem72g62h...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

CVE-2025-41711

creationtimestamp| type| source ---|---|--- 2026-03-10 07:23:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/116203676038306087 2026-03-10 07:24:51+00:00| seen| https://infosec.exchange/users/certvde/statuses/116203682967755268...

CVE-2025-41712

creationtimestamp| type| source ---|---|--- 2026-03-10 07:23:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/116203676038306087 2026-03-10 07:24:51+00:00| seen| https://infosec.exchange/users/certvde/statuses/116203682967755268...

CVE-2026-0953

creationtimestamp| type| source ---|---|--- 2026-03-10 06:02:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116203359237268165 2026-03-19 06:33:06+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhfeyvcsvp22...

CVE-2026-3585

creationtimestamp| type| source ---|---|--- 2026-03-10 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116202997545439339 2026-03-10 16:40:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3585 2026-03-10 16:40:37+00:00| seen|...

CVE-2026-30862

creationtimestamp| type| source ---|---|--- 2026-03-10 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116202643726553087 2026-04-10 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/79787...

📄 WatchGuard IKEv2 Detection Scanner

This Metasploit module checks for potential vulnerability to CVE-2022-23176 in WatchGuard Firmware IKEv2 service by analyzing malformed IKESAINIT responses. ============================================================================================================================================...

CVE-2026-28431

creationtimestamp| type| source ---|---|--- 2026-03-09 22:30:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/116201580941905093...

CVE-2026-28513

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-28513 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-28513 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-28513 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-28513

Pocket ID is an OIDC provider. Before version 2.4.0, the token endpoint could accept an authorization code that is expired when the client ID is correct, enabling cross-client code reuse and expired-code reuse. The issue is fixed in 2.4.0. No exploitation path details are provided beyond that, an...

CVE-2026-0846

creationtimestamp| type| source ---|---|--- 2026-03-09 19:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0846 2026-03-09 21:00:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116201227310498723 2026-04-18 08:37:08+00:00| seen|...