75555 matches found
CVE-2026-60436
creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65697
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-60384
creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:27+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxpybzca2r 2026-07-29 11:37:07+00:00| seen|...
CVE-2026-14257
creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvmlwzj22 2026-07-24 22:35:03+00:00| published-proof-of-concept| https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg...
CVE-2026-61178
creationtimestamp| type| source ---|---|--- 2026-07-23 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdchceyni2y 2026-07-23 18:16:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61175
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdqyu3n2v 2026-07-23 18:16:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61174
creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdps45p24 2026-07-23 18:16:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-65901
creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x4vx-rjvf-j5p4...
CVE-2026-65902
creationtimestamp| type| source ---|---|--- 2026-07-23 16:35:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-76mc-f452-cxcm...
CVE-2026-65697 Fathom Lite 1.3.1 Stored XSS via /collect Endpoint
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated /collect endpoint...
CVE-2026-65689
creationtimestamp| type| source ---|---|--- 2026-07-23 15:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd4cmiw522q 2026-07-23 16:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrd7hza4il2a 2026-07-29 22:07:06+00:00| seen|...
Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
Summary The default email-address normalizer used by the email/magic-link sign-in flow validates the address before applying Unicode normalization. An address can contain a Unicode character that is not an ASCII @ U+0040 but canonicalizes to one under NFKC/NFKD normalization the normalization...
GHSA-7RQJ-J65F-68WH Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
Summary The default email-address normalizer used by the email/magic-link sign-in flow validates the address before applying Unicode normalization. An address can contain a Unicode character that is not an ASCII @ U+0040 but canonicalizes to one under NFKC/NFKD normalization the normalization...
CVE-2026-65899
creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vxr8-fq34-vvx9...
CVE-2026-15011
creationtimestamp| type| source ---|---|--- 2026-07-23 13:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcymksio42v...
CVE-2026-65461
creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwrraod2v...
CVE-2026-61951
creationtimestamp| type| source ---|---|--- 2026-07-23 13:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvta62f32r...
CVE-2026-61948
creationtimestamp| type| source ---|---|--- 2026-07-23 13:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvplomuv2j...