BIT-KEYCLOAK-2026-18214 Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This mean...

CVE-2026-77454

creationtimestamp| type| source ---|---|--- 2026-08-31 01:04:24+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117187429253891723 2026-08-31 11:39:38+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3muet2x6kim2s...

CVE-2026-82680

creationtimestamp| type| source ---|---|--- 2026-08-30 16:53:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117185499500658483...

CVE-2026-82542

creationtimestamp| type| source ---|---|--- 2026-08-30 13:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3much3ufslf23 2026-08-30 13:48:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117184773013123988 2026-08-30 14:07:06+00:00| seen|...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

CVE-2026-72984

creationtimestamp| type| source ---|---|--- 2026-08-28 20:50:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117175107454353019 2026-08-29 17:03:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muaea2mnul2m 2026-08-31 04:45:23+00:00| seen|...

WordPress Return Refund and Exchange For WooCommerce plugin < 4.6.4 - Unauthenticated Guest Order Message Disclosure and Manipulation vulnerability

Unauthenticated Guest Order Message Disclosure and Manipulation vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Return Refund and Exchange For WooCommerce versions 4.6.4...

Vulnerabilities in Microsoft Exchange servers

Microsoft has identified vulnerabilities in Exchange Server. A malicious individual can exploit these vulnerabilities to carry out a Denial-of-Service attack, impersonate other users, gain elevated privileges, execute arbitrary code, and/or access sensitive data. For successful exploitation, the...

CVE-2026-80608

creationtimestamp| type| source ---|---|--- 2026-08-28 08:09:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172112457184475...

CVE-2026-80600

creationtimestamp| type| source ---|---|--- 2026-08-28 07:55:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172058724621440 2026-08-29 14:20:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua33xruaz2c...

CVE-2026-81680

creationtimestamp| type| source ---|---|--- 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4xn35co725 2026-08-29 15:30:03+00:00| seen|...

CVE-2026-81707

creationtimestamp| type| source ---|---|--- 2026-08-27 18:10:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gzkv2c62u 2026-08-27 19:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3juf2pf22l 2026-08-27 19:24:01+00:00| seen|...

CVE-2026-81702

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyxtoht2e 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:01:13+00:00| seen|...

CVE-2026-81700

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyh2uwf2b 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:00:58+00:00| seen|...

CVE-2026-81698

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gy4ckbn24 2026-08-27 19:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3jum3jyi27 2026-08-27 19:24:01+00:00| seen|...

CVE-2026-81694

creationtimestamp| type| source ---|---|--- 2026-08-27 18:08:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gxd2wg225 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-09-04 03:37:06+00:00| seen|...

CVE-2026-81681

creationtimestamp| type| source ---|---|--- 2026-08-27 18:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gws43um2y 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 10:00:06+00:00| seen|...

CVE-2026-74233

creationtimestamp| type| source ---|---|--- 2026-08-27 14:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t 2026-08-27 16:29:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168418324906939 2026-08-27 17:00:45+00:00| seen|...

EUVD-2026-66445

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

ट्रायेज: CVE-2021-26855 ProxyLogon - Microsoft Exchange इस लैब में, लक्ष्य एक प्रसिद्ध वास्तविक दुनिया की भेद्यता का ट्रायेज उसी तरह अभ्यास करना था जैसे एक सुरक्षा टीम करती है: CVE विवरण पढ़ना, CVSS स्कोर समझना, और यह तर्क करना कि स्थिति के आधार पर यह वास्तव में कितना जोखिम भरा है। चरण 1: NVD में...