CVE-2026-12602

creationtimestamp| type| source ---|---|--- 2026-06-23 09:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116798796957751949...

GHSA-4Q6H-8P4V-67VQ

creationtimestamp| type| source ---|---|--- 2026-06-23 09:41:50+00:00| seen| https://gist.github.com/alon710/ca5754f7e7e7aeff3ad1cd262378f58b...

CVE-2013-6786

creationtimestamp| type| source ---|---|--- 2026-06-23 07:37:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798275755976502 2026-06-23 07:37:37+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mowvekv7fx72...

CVE-2026-54233

creationtimestamp| type| source ---|---|--- 2026-06-23 00:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow4qv4vqu2m...

MINI-H2V8-F228-5GMC

Bulletin has no description...

CVE-2026-56323

Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channelself endpoint that allows unauthenticated attackers to enumerate non-public channel names and determine app existence and subscription status. Remote attackers can send GET requests with arbitrary...

CVE-2026-56323 Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self

Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channelself endpoint that allows unauthenticated attackers to enumerate non-public channel names and determine app existence and subscription status. Remote attackers can send GET requests with arbitrary...

CVE-2026-56323

Capgo CVE-2026-56323 affects Capgo before 12.128.2. The /functions/v1/channel_self endpoint allows unauthenticated information disclosure, enabling enumeration of non-public channel names, app existence, and subscription status. Remote attackers can issue GET requests with arbitrary app_id to rev...

CVE-2026-56323

Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channelself endpoint that allows unauthenticated attackers to enumerate non-public channel names and determine app existence and subscription status. Remote attackers can send GET requests with arbitrary...

EUVD-2026-38373

Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channelself endpoint that allows unauthenticated attackers to enumerate non-public channel names and determine app existence and subscription status. Remote attackers can send GET requests with arbitrary...

CVE-2026-56323 Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self

Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channelself endpoint that allows unauthenticated attackers to enumerate non-public channel names and determine app existence and subscription status. Remote attackers can send GET requests with arbitrary...

GHSA-RV89-WCH8-C574 Paymenter doesn't reset email verification status after email change

Summary The email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified status after switching to an unverified or unowned email address. Technical Details When a user updated their emai...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the email update process. An attacker can retain a verified status on an account after changing the associated email address to one they do not control by updating the email without triggering a new verificati...

Paymenter doesn't reset email verification status after email change

Summary The email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified status after switching to an unverified or unowned email address. Technical Details When a user updated their emai...

PYSEC-2026-2112

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save and then restored later with CookieJar.load lose their host-only status. This vulnerability is fixed in 3.14.1...

MINI-VCQC-Q43R-9CX2

Bulletin has no description...

CVE-2026-6653

creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3movco6cnwk26 2026-07-08 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533bbiim2i 2026-07-10 12:01:08+00:00| seen|...

CVE-2026-5139

creationtimestamp| type| source ---|---|--- 2026-06-22 15:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movanaj4zd2t...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...