CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...

CVE-2026-44815

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 18:20:20+00:00| seen|...

CVE-2026-44812

creationtimestamp| type| source ---|---|--- 2026-06-09 15:44:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0181 2026-06-09 16:04:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182 2026-06-09 16:12:18+00:00| seen|...

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Server Information Disclosure Vulnerability

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...

Microsoft Exchange Server Information Disclosure Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Exchange Server Spoofing Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

CVE-2025-10263

creationtimestamp| type| source ---|---|--- 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-09 13:42:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnuda5fphm2q 2026-06-09 15:44:28+00:00| seen|...

CVE-2026-42487

creationtimestamp| type| source ---|---|--- 2026-06-09 13:37:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucx6ujgc2i 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2026-42490

creationtimestamp| type| source ---|---|--- 2026-06-09 13:32:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucoaa2ss26 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

Scammers love Meta, according to Lloyds Bank

Scammers go phishing wherever the victims are. In the UK, that means Facebook, Instagram, and WhatsApp, according to Lloyds Bank. It just revealed that Meta platforms account for over two thirds of fraud reports made by its customers. Writing in The Sunday Times, Lloyds Bank's fraud prevention...

CVE-2026-41284

creationtimestamp| type| source ---|---|--- 2026-06-09 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116719683306463901...

CVE-2026-40519

creationtimestamp| type| source ---|---|--- 2026-06-09 10:28:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116719675922395584 2026-07-16 19:00:18+00:00| seen| Telegram/Rc0b9T17FJVJElH6QZhazeHK5sevkoWVsl-YVplQMonaEk 2026-07-17 01:00:17+00:00| seen|...

CVE-2026-26236

creationtimestamp| type| source ---|---|--- 2026-06-09 06:02:04+00:00| seen| https://infosec.exchange/users/offseq/statuses/116718621544406712 2026-06-17 12:00:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-18 03:38:08+00:00| seen|...

EUVD-2026-35326

A WebFlux application with a compromised subdomain for example, compromised via cross-site scripting XSS is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0...

PT-2026-48292

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A server crash occurs when using $changestreams and $ requestReshardingResumeToken with the exchange option. This issue is triggered when the server hits an invariant, and it can be executed ...