CVE-2026-123545

The software OpenAM versions 14.5.1 before 16.1.4 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within the OAuth 2.0 device authorization flow . The vulnerability occurs when consent is skipped for implied-consent clients, enabling an attacker to approve device codes without proper au...

Researcher Creates Database of 35 Million Identifiable Google Profiles

A Dutch researcher has discovered that he could convert most of the data within Google Profiles into a single SQL statement and expose, among other data, the usernames and Gmail addresses of some 35,000,000 people. The researcher, Matthijs R. Koot explained in a blogpost that there is an xml file...