AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

Summary The Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with arbitrary payment amounts and target user IDs. By supplying a valid transaction ID from a small legitimate purchase, the...

CVE-2026-12249

creationtimestamp| type| source ---|---|--- 2026-06-22 19:32:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movmu4ylmw2q 2026-06-23 16:29:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116800366330235493...

CVE-2026-53778

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

MINI-P37C-VG6J-35QX

Bulletin has no description...

MINI-8XFH-W4MG-J9V9

Bulletin has no description...

MINI-MWJF-QP8R-7R7H

Bulletin has no description...

MINI-X394-F977-VHXG

Bulletin has no description...

MINI-V2VG-R633-QGRQ

Bulletin has no description...

MINI-VCMW-H3FR-MC65

Bulletin has no description...

MINI-CF8X-FVQ9-VM6G

Bulletin has no description...

MINI-P2J5-R4J6-FPHW

Bulletin has no description...

MINI-X6QM-78PP-FJQP

Bulletin has no description...

MINI-6PQ3-CRXJ-7P32

Bulletin has no description...

CVE-2026-54267

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered SSR environments, Angular supports Hydration via...

MINI-3FH4-6J6M-P3G5

Bulletin has no description...

MINI-2WGG-C5QM-RR63

Bulletin has no description...

CVE-2026-56422

CVE-2026-56422 affects MISP core controllers and models where client-controlled fields (ids and ownership/scope keys such as event_id, org_id, user_id, sharing_group_id, galaxy_cluster_uuid, organisation_uuid, etc.) were not consistently stripped or revalidated, enabling an authenticated user to ...

CVE-2026-12581

EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in...

CVE-2026-8157

creationtimestamp| type| source ---|---|--- 2026-06-22 07:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116792585922539614 2026-06-22 07:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l 2026-06-22 08:14:26+00:00| seen|...

GHSA-WVRH-2F4M-924V

creationtimestamp| type| source ---|---|--- 2026-06-22 03:21:45+00:00| seen| https://gist.github.com/alon710/f71625529d1c2c0e0c6b0f02ed674488 2026-06-22 03:32:02+00:00| seen| https://gist.github.com/alon710/c7e86c644a18ac812b6d13eff8101d8c 2026-06-22 03:42:22+00:00| seen|...