16568 matches found
CVE-2026-16807
creationtimestamp| type| source ---|---|--- 2026-07-23 22:42:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971701809054544 2026-07-24 02:05:03+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrebai6xxb2l 2026-07-24 12:45:38+00:00| seen|...
CVE-2026-16805
creationtimestamp| type| source ---|---|--- 2026-07-23 22:15:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971596854729313 2026-07-24 12:45:43+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen|...
CVE-2026-63359
The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...
Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
CVE-2026-65471
creationtimestamp| type| source ---|---|--- 2026-07-23 12:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116969179247457924 2026-07-23 12:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcs2i52k72r 2026-07-23 13:12:04+00:00| seen|...
CVE-2026-16560
creationtimestamp| type| source ---|---|--- 2026-07-23 05:55:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116967742251184999...
KLA91178 SUI vulnerability in Microsoft Server Software
User interface spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-56191 Exploitation CVE list CVE-2026-56191 critical KB list Solution Install necessary updates from the KB section, th...
GHSA-8342-988Q-86CR n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login
Impact In an n8n instance, when a validly-signed incoming token was matched to a local account by its email claim, the service did not check that the trusted key's permitted role ceiling covered that account, nor that the email claim was verified. As a result, anyone able to obtain a token accept...
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...
GHSA-777W-RPR6-C52H n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
Impact JWTs issued through the Token Exchange module were assigned all Public API key scopes, regardless of the acting user's actual role. A low-privileged user who could obtain a valid external JWT trusted by a configured issuer could therefore use the resulting access token to invoke...
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
Impact JWTs issued through the Token Exchange module were assigned all Public API key scopes, regardless of the acting user's actual role. A low-privileged user who could obtain a valid external JWT trusted by a configured issuer could therefore use the resulting access token to invoke...
NPM: n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
NPM: n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution vulnerability discovered by ? in WordPress Npm n8n versions 2.27.4...
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Impact When an n8n instance is configured with more than one trusted token-exchange issuer, external identities are resolved to local accounts using only the JWT sub claim, ignoring the issuer iss. As a result, two different issuers that emit the same subject value map to the same local account. ...
GHSA-MQ3M-F8X3-579W n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Impact When an n8n instance is configured with more than one trusted token-exchange issuer, external identities are resolved to local accounts using only the JWT sub claim, ignoring the issuer iss. As a result, two different issuers that emit the same subject value map to the same local account. ...
UBUNTU-CVE-2026-16615
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...
SUSE CVE-2026-59842
A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...
SUSE CVE-2026-59851
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...
CVE-2026-16615
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...
GHSA-M5FR-RV3H-XG2R
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
CVE-2026-63134
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474 2026-08-18 20:07:19+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mtezer436f2m 2026-08-21 20:15:09+00:00| seen|...