CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-16217

creationtimestamp| type| source ---|---|--- 2026-07-19 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945113858277904 2026-07-19 06:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqy42sn6732h 2026-07-19 08:10:02+00:00| seen|...

CVE-2026-16210

creationtimestamp| type| source ---|---|--- 2026-07-19 04:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944759986921885 2026-07-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxwzv2zwr2h 2026-07-19 08:19:20+00:00| seen|...

CVE-2026-11826

creationtimestamp| type| source ---|---|--- 2026-07-18 15:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941575267749808 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqwjrnagnc2i 2026-07-18 15:00:39+00:00| seen|...

CVE-2026-9147

creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...

CVE-2026-16096

creationtimestamp| type| source ---|---|--- 2026-07-18 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116940867225881920 2026-07-18 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqw7pnwhln25 2026-07-18 12:43:40+00:00| seen|...

CVE-2026-48373

creationtimestamp| type| source ---|---|--- 2026-07-17 22:35:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116937701968691999 2026-07-18 12:08:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqwa5ft6db2d 2026-07-18 12:08:28+00:00| seen|...

CVE-2026-13410

CVE-2026-13410 affects Dancer::Plugin::Auth::Google for Perl up to version 0.07, where TLS verification is disabled in the library and the default user agent SSL_verify_mode is turned off. This enables a network (MITM) attacker between the Dancer app and googleapis.com to intercept the OAuth2 tok...

PT-2026-60745

Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with SSL verify mode explicitly disabled. An attacker with network man-in-the-middle MITM capability between the Dancer application and googleapis.com can intercept th...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...

openSUSE 16 Security Update : libredwg (openSUSE-SU-2026:21346-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21346-1 advisory. Changes in libredwg: - Update to snapshot 0.14.8413 fix dwgnextentity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwgbmp thumbnail...

Libreswan 4.6 < 5.3.1 DoS

The version of Libreswan installed on the remote host is between 4.6 and 5.3.1 exclusive. It is, therefore, affected by a denial of service vulnerability. An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. The function reassemblev2incomingfragments would...

CVE-2026-53518 Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizationcode grant redeems a single-use authorization code through a non-atomic find-then-delete sequence, allowing two...

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizationcode grant redeems a single-use authorization code through a non-atomic find-then-delete sequence, allowing two...

CVE-2026-20146

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-20 00:04:15+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mqzymsvplg2e...

CVE-2026-20153

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-16 00:09:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926745966884527 2026-07-16 13:00:30+00:00| seen|...

EUVD-2026-44693

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did not bind the OAuth state parameter accepted by /connect/authorize to the initiating browser session, allowed attacker-controlled PKCE parameters, and left SsoAuth records intact...

CVE-2026-47158 Vaultwarden: CSRF in SSO Authorization Flow

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did not bind the OAuth state parameter accepted by /connect/authorize to the initiating browser session, allowed attacker-controlled PKCE parameters, and left SsoAuth records intact...

CVE-2026-59837

creationtimestamp| type| source ---|---|--- 2026-07-15 10:13:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116923458848771348 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2026-59839

creationtimestamp| type| source ---|---|--- 2026-07-15 07:22:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116922788149851186 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...