Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the order GraphQL query. An attacker can access sensitive information, including personally identifiable information PII, by sending unauthorized queries to the API. Workaround This...

PT-2026-4564

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's...

CVE-2025-12780

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-67231

creationtimestamp| type| source ---|---|--- 2026-01-23 20:20:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4jlxk6pq2r...

CVE-2026-22980

creationtimestamp| type| source ---|---|--- 2026-01-23 16:46:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115945423782502715 2026-01-23 17:14:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4772s5lo2r 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-69908

creationtimestamp| type| source ---|---|--- 2026-01-23 16:45:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md45lak6sv25...

CVE-2026-22989

In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...

CVE-2025-71155

creationtimestamp| type| source ---|---|--- 2026-01-23 15:26:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115945109318885250 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 00:46:40+00:00|...

CVE-2026-22276

creationtimestamp| type| source ---|---|--- 2026-01-23 11:30:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3lxgtjlw2m...

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

CVE-2026-0603

creationtimestamp| type| source ---|---|--- 2026-01-23 08:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3cke767t2r 2026-01-23 10:12:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hmmsutm2g 2026-04-27 02:00:04+00:00| seen|...

CVE-2025-45160

creationtimestamp| type| source ---|---|--- 2026-01-23 07:19:29+00:00| seen| https://gist.github.com/BEND0US/49d76897a5bb676d8c3f51425553cc32 2026-01-29 20:56:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlofqclic2m...

CVE-2026-23953

creationtimestamp| type| source ---|---|--- 2026-01-22 19:07:38+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-x6jc-phwx-hp32 2026-01-22 23:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2c3twkrs2a 2026-01-23 00:08:48+00:00|...

GHSA-2762-657X-V979

creationtimestamp| type| source ---|---|--- 2026-01-22 16:07:21+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115939609108003343...

CVE-2025-4763

creationtimestamp| type| source ---|---|--- 2026-01-22 11:43:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcz47vscdm2c...

CVE-2025-55705

creationtimestamp| type| source ---|---|--- 2026-01-22 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-08 2026-01-22 23:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2eang4dm2c...

CVE-2026-1201

creationtimestamp| type| source ---|---|--- 2026-01-22 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-06 2026-01-22 23:48:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2erbfj2x2i...

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

CVE-2026-24332

Discord is reported to allow revealing whether a user is Invisible by returning a presences array in a WebSocket response that includes users marked as offline, exposing inconsistency with the UI description of Invisible. Affected scope is described across multiple sources (NVD, Red Hat advisory,...