CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

CVE-2026-59842

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

EUVD-2026-46176

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

CVE-2026-59842

CVE-2026-59842 (libssh) : A flaw in server-side GSSAPI key exchange allows a client-supplied Curve25519 public key shorter than expected to be copied without length validation, causing an out-of-bounds heap read and exposing small amounts of server memory to remote unauthenticated attackers. Affe...

CVE-2026-59842

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

PT-2026-61857

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

CVE-2026-16277

creationtimestamp| type| source ---|---|--- 2026-07-20 19:16:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953907325387577 2026-07-23 22:33:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24...

CVE-2026-64189

creationtimestamp| type| source ---|---|--- 2026-07-20 18:29:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wfeytzg2q 2026-07-20 19:03:31+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116953855519782149 2026-07-24 13:25:25+00:00| seen|...

gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...

Cisco ASA IKEv1/IKEv2 Buffer Overflow (CVE-2016-1287)

A vulnerability in the Internet Key Exchange IKE version 1 v1 and IKE version 2 v2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code...

CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-16217

creationtimestamp| type| source ---|---|--- 2026-07-19 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945113858277904 2026-07-19 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqy42sn6732h 2026-07-19 08:10:02+00:00| seen|...

CVE-2026-16210

creationtimestamp| type| source ---|---|--- 2026-07-19 04:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944759986921885 2026-07-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxwzv2zwr2h 2026-07-19 08:19:20+00:00| seen|...

CVE-2026-11826

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941575267749808 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqwjrnagnc2i 2026-07-18 15:00:39+00:00| seen|...

CVE-2026-9147

creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...

CVE-2026-16096

creationtimestamp| type| source ---|---|--- 2026-07-18 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116940867225881920 2026-07-18 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqw7pnwhln25 2026-07-18 12:43:40+00:00| seen|...

CVE-2026-48373

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116937701968691999 2026-07-18 12:08:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwa5ft6db2d 2026-07-18 12:08:28+00:00| seen|...

CVE-2026-13410

CVE-2026-13410 affects Dancer::Plugin::Auth::Google for Perl up to version 0.07, where TLS verification is disabled in the library and the default user agent SSL_verify_mode is turned off. This enables a network (MITM) attacker between the Dancer app and googleapis.com to intercept the OAuth2 tok...

PT-2026-60745

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSL verify mode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept th...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...