23355 matches found
CVE-2026-14561
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
CVE-2026-14561 Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
CVE-2026-15403
creationtimestamp| type| source ---|---|--- 2026-08-01 04:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edajbk4hcu7ak...
CVE-2026-14561: Improper Authentication
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
PT-2026-67044
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
GHSA-4328-8HGF-7WJR
creationtimestamp| type| source ---|---|--- 2026-07-31 19:38:28+00:00| seen| https://gist.github.com/konard/91df17bf902150322c465ca6b6479053...
GHSA-5846-7QM3-R52J
creationtimestamp| type| source ---|---|--- 2026-07-31 17:31:37+00:00| seen| https://gist.github.com/alon710/3725c6658b9e4e7f9bed06e9ce214b76...
CVE-2025-67650
creationtimestamp| type| source ---|---|--- 2026-07-31 17:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2025-67649...
Chromium: CVE-2026-17859 Side-channel information leakage in Favicons
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-64808
creationtimestamp| type| source ---|---|--- 2026-07-31 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwr4la2762m...
RHSA-2026:48605 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
RHSA-2026:48482 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CVE-2026-63223
creationtimestamp| type| source ---|---|--- 2026-07-31 06:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwcngx6kp2e 2026-07-31 07:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d3wahrnexyoi5 2026-07-31 09:19:42+00:00| seen|...
CVE-2026-51243
creationtimestamp| type| source ---|---|--- 2026-07-31 03:26:49+00:00| seen| https://gist.github.com/programmervuln/93176789b1e5b46d8aba1038a7d797d9...
ECHO-899E-D768-27F6
Bulletin has no description...
ECHO-5E13-0003-83B6
Bulletin has no description...
ECHO-8278-FA49-15F8
Bulletin has no description...
DEBIAN-CVE-2026-58218
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...