67495 matches found
EUVD-2026-56555
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...
CVE-2025-31114
creationtimestamp| type| source ---|---|--- 2026-08-11 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst2jrpkgr2u 2026-08-14 04:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mszeav5rli2f...
EUVD-2026-56481
Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...
CVE-2026-73079
Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts ChatGPT/Codex OAuth, OpenAI platform keys, or an...
CVE-2026-48766
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerable path decrypts the selected workspace...
CVE-2026-42142
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-48766 TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerable path decrypts the selected workspace...
EUVD-2026-56235
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-56720
CVE-2026-56720 — CamaleonCMS
EUVD-2026-56232
CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...
ROOT-OS-ALPINE-323-CVE-2026-11564 CVE-2026-11564 in curl - Patched by Root
Root has patched CVE-2026-11564 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...
EUVD-2026-56152
TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...
CVE-2026-47702
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-47702 TypeBot API tokens stored in plaintext
TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...
CVE-2026-47702 TypeBot API tokens stored in plaintext
TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...
Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...