CVE-2026-13339

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...

CVE-2026-51954

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:07+00:00| seen| Telegram/uaJgeobsmMXpPI5RgjN2GQTZDxY3uvuK9RjA2OXMpGho 2026-08-03 03:29:36+00:00| published-proof-of-concept| Telegram/uaJgeobsmMXpPI5RgjN2GQTZDxY3uvuK9RjA2OXMpGho...

CVE-2026-55733

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-54894

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-55733

CVE-2026-55733 concerns Guardian permissions AtomEncoding: when encoding permission scopes, external binary inputs are passed to String.to_atom/1 without allow-list checks, causing unbounded atom creation. Each unseen binary mints a permanent BEAM atom; the atom table is finite (~1,048,576 entrie...

EUVD-2026-51915

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-54894

CVE-2026-54894 affects guardian: from 0.1.0 before 2.4.1. The issue arises when Guardian.Plug.Keys converts attacker-controlled binaries into atoms via String.to_atom/1, creating permanent atoms (e.g., "guardian_") and a second atom for keys mustered by claims_key/resource_key/token_key. Since at...

CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2026-16144

creationtimestamp| type| source ---|---|--- 2026-08-01 11:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwkxawn2n 2026-08-01 18:01:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22fgopyh2v 2026-08-01 23:03:24+00:00| seen|...

CVE-2026-15964

creationtimestamp| type| source ---|---|--- 2026-08-01 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzb7mhn4f2c 2026-08-01 11:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcugznah2n 2026-08-01 18:35:23+00:00| seen|...

CVE-2026-13157

creationtimestamp| type| source ---|---|--- 2026-08-01 10:20:08+00:00| seen| https://bsky.app/profile/smartdeals.bsky.social/post/3mrzan5fore2x 2026-08-01 13:00:04+00:00| seen| Telegram/zkpMdkb1nwTnC0N6uNzVvNYCe5r6OIkmQsBbvblzOMqyUQE 2026-08-01 14:55:17+00:00| seen|...

CVE-2026-18344

creationtimestamp| type| source ---|---|--- 2026-08-01 10:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hcboak6644dts 2026-08-01 17:43:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzfowyul2l 2026-08-01 17:44:05+00:00| seen|...

XWiki < 14.10.14 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according to a name strategy disabled by default, XWiki starting in version 12.0-rc-1 and prior to versions 12.10.12 and 15.5-rc-1 is vulnerable to a reflecte...

CVE-2026-13152

creationtimestamp| type| source ---|---|--- 2026-08-01 07:00:04+00:00| seen| https://t.me/GithubRedTeam/96105 2026-08-01 10:00:03+00:00| seen| Telegram/cim9FqsdIIG77VgS8PjeqDT3oIZOc5lo17f7LtNx9kniUA 2026-08-01 10:00:03+00:00| seen| Telegram/qAspjE1L-VVREGyDK8YlPzODJIxdxXtpgp2Eql6QlgFrVPg 2026-08-...

CVE-2026-14561

The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...

CVE-2026-13729

CVE-2026-13729 concerns the Podlove Podcast Publisher WordPress plugin, affected in versions before 4.5.3. The vulnerability arises because the plugin does not perform nonce validation on some administrative create and delete actions, enabling a forged request (CSRF). This can allow an attacker t...

CVE-2026-62999

creationtimestamp| type| source ---|---|--- 2026-07-31 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l 2026-08-01 00:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999...