35556 matches found
GHSA-GX3V-Q759-G323 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface
Summary I'm reporting two related TOTP one-time-use defects in Gitea that survive the CVE-2021-45331 fix. The 2018 fix PR 3878 introduced the TwoFactor.LastUsedPasscode field and added an in-memory inequality check on the web 2FA login path. That check works correctly in the single-request case,...
CVE-2026-61151
...
CVE-2026-60741
CVE-2026-60741 affects Oracle E-Business Suite Oracle Cost Management (Internal Operations) with vulnerable versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Cost Management, potentially creating, deleting, or modifying data across all accessible ...
CVE-2026-64821 djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views
djangoSIGE through 1.10 commit a6fe7e8 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to cancel sales or purchase orders on behalf of authenticated users by exploiting order-cancellation logic implemented inside HTTP GET method handlers in...
CVE-2026-16317 Silent Drop of TLS 1.3 Encrypted Records in s2n-tls
Missing validation of the outer contenttype byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently discard individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requires that the outer contenttype of all...
EUVD-2026-43960
Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry...
GHSA-XVCM-6775-5M9R Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
Summary Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a collision bucket that is scanned linearly. The string hash is public and deterministic, so an attacker who controls the keys inserted into a Map can craft many keys that all collide, degrading insertion and...
CVE-2026-47410 praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal "dev-secret-change-me" when PLATFORMJWTSECRET is unset. A safety check exists but only...
CVE-2026-47122
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
CVE-2026-47122
Sparkle CVE-2026-47122 affects Sparkle 2.x up to 2.9.1. After stage 1 installation, the AppInstaller’s Mach service (-spki) accepts connections from any local process without team-ID or code-signing checks, enabling a local attacker to inject a spoofed SPUSentUpdateAppcastItemData payload and cau...
CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
CVE-2026-16388
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
CVE-2026-16370 Mitigation bypass in the DOM: Networking component
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
EUVD-2026-46196
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153...
CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 through 11052026...
CVE-2026-8285
Technical details about CVE-2026-8285 are not publicly available in the provided documents. Affected: FlexCity (Universal Software Inc.) 5.536.0–11052026. Monitor for updates.
CVE-2026-59845
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...
CLEANSTART-2026-AC64135 Security fixes for CVE-2020-11100 applied in versions: 2.1.4-r0
Security vulnerability affects the haproxy package. This issue is resolved in later releases. See references for vulnerability details...