3340 matches found
CVE-2026-73703
creationtimestamp| type| source ---|---|--- 2026-09-03 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mum7cagbhs2r...
CVE-2026-18329
creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:45+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 12:45:11+00:00| seen| https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx 2026-09-03 13:45:07+00:00| seen|...
Fedora 44 : kernel (2026-0d885c0533)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0d885c0533 advisory. The 7.1.13 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream...
GHSA-7MGC-C7PQ-3RR3 Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them unauthorized pending TOTP verification. During this pending-challenge window, the login.regenerate2FASecret task which requires only $user-exists, not $user-authorized can be called...
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them unauthorized pending TOTP verification. During this pending-challenge window, the login.regenerate2FASecret task which requires only $user-exists, not $user-authorized can be called...
EUVD-2026-62540
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge...
CVE-2026-84377
creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq 2026-09-30 22:30:31+00:00| seen| https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79...
PT-2026-86213
CVE ID :CVE-2026-23585 Published : Sept. 2, 2026, 7:52 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-86215
CVE ID :CVE-2026-23587 Published : Sept. 2, 2026, 7:52 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-39904
creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188216 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188218 2026-09-02 01:00:21+00:00| published-proof-of-concept| https://t.me/hackingAttack/188216 2026-09-02 01:00:22+00:00|...
CVE-2026-51713
creationtimestamp| type| source ---|---|--- 2026-09-01 15:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhqxs7ztq2o...
CVE-2026-84119
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-84139
Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
PT-2026-84363
Name of the Vulnerable Software and Affected Versions kamailio versions prior to 6.1.1 Description A remote attacker can cause a denial of service through the ims registrar pcscf module. The issue occurs during security-agreement parsing within the parse sec agree function in sec agree.c,...
CVE-2026-51730
creationtimestamp| type| source ---|---|--- 2026-08-31 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufq5k5va625 2026-08-31 22:07:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw5hfix72c...
CVE-2026-73552
A flaw was found in Envoy. When evaluating regular expressions in role-based access control RBAC policies, Envoy improperly treats non-UTF-8 characters in HTTP header values as non-matching input. A remote attacker can exploit this flaw by sending requests with specially crafted HTTP headers to...
CVE-2026-73512
A flaw was found in Envoy. A remote attacker can cause a Denial of Service DoS by triggering a use-after-free memory vulnerability in the QUIC HTTP datagram handler. When HTTP/3 datagrams and the Capsule Protocol are enabled, stream recreation events such as internal redirects can leave the handl...
CVE-2026-81692
creationtimestamp| type| source ---|---|--- 2026-08-31 08:02:18+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3muegwcnxux2o...
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2088)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2088 advisory. Issue summary: When an OpenSSL QUIC server Listener SSL object processesvalid QUIC Initial packets for unknown destination connection IDs, itcan allocate and queue new incoming channels without enforci...