CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-16217

creationtimestamp| type| source ---|---|--- 2026-07-19 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945113858277904 2026-07-19 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqy42sn6732h 2026-07-19 08:10:02+00:00| seen|...

CVE-2026-16210

creationtimestamp| type| source ---|---|--- 2026-07-19 04:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944759986921885 2026-07-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxwzv2zwr2h 2026-07-19 08:19:20+00:00| seen|...

CVE-2026-11826

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941575267749808 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqwjrnagnc2i 2026-07-18 15:00:39+00:00| seen|...

CVE-2026-9147

creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...

CVE-2026-16096

creationtimestamp| type| source ---|---|--- 2026-07-18 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116940867225881920 2026-07-18 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqw7pnwhln25 2026-07-18 12:43:40+00:00| seen|...

CVE-2026-48373

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116937701968691999 2026-07-18 12:08:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwa5ft6db2d 2026-07-18 12:08:28+00:00| seen|...

CVE-2026-13410

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

CVE-2026-13410

CVE-2026-13410 affects Dancer::Plugin::Auth::Google for Perl up to version 0.07, where TLS verification is disabled in the library and the default user agent SSL_verify_mode is turned off. This enables a network (MITM) attacker between the Dancer app and googleapis.com to intercept the OAuth2 tok...

CVE-2026-13410 Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled

Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is initialised with SSLverifymode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept the...

Authorization Bypass Through User-Controlled Key

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to the OAuth 2.0 authorization code handling. An attacke...

The vulnerability of the `VertxWebsocketConsumer.populateExchangeHeaders()` function in the Vertx WebSocket component of the Java framework Apache Camel allows a attacker to disclose sensitive information and perform an SSRF attack.

The vulnerability of the VertxWebsocketConsumer.populateExchangeHeaders method in the Vertx WebSocket component from the Java framework Apache Camel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information and...

PT-2026-60745

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSL verify mode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept th...

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a local user on the sub claim alone and ignored iss. A valid token from issuer A carrying a sub that belong...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...

openSUSE 16 Security Update : libredwg (openSUSE-SU-2026:21346-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21346-1 advisory. Changes in libredwg: - Update to snapshot 0.14.8413 fix dwgnextentity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwgbmp thumbnail...

Libreswan 4.6 < 5.3.1 DoS

The version of Libreswan installed on the remote host is between 4.6 and 5.3.1 exclusive. It is, therefore, affected by a denial of service vulnerability. An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. The function reassemblev2incomingfragments would...

CVE-2026-53518 Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizationcode grant redeems a single-use authorization code through a non-atomic find-then-delete sequence, allowing two...

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizationcode grant redeems a single-use authorization code through a non-atomic find-then-delete sequence, allowing two...

CVE-2026-20146

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-20 00:04:15+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mqzymsvplg2e...