65254 matches found
CVE-2025-13909
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2026-6639
creationtimestamp| type| source ---|---|--- 2026-08-06 08:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u...
EUVD-2025-210630
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2025-13909
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2025-13909
WSO2 Identity Server is reported to have a multi-tenant authentication flaw where requests using Email OTP, SMS OTP, or Magic Link as first factors do not adequately enforce tenant isolation. This can allow an attacker to disclose PII from other tenants (e.g., mobile numbers) due to cross-tenant ...
CVE-2025-13909 Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
GHSA-4VR5-P2GC-H23P
creationtimestamp| type| source ---|---|--- 2026-08-06 07:31:27+00:00| seen| https://gist.github.com/alon710/7cd2b59244b6ec677e9295bd453cf08b...
CVE-2026-19008 mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
CVE-2026-19008
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
EUVD-2026-53766
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
CVE-2026-19008
Technical details about CVE-2026-19008 are not publicly available in the provided documents. Monitor for updates.
GHSA-HXVH-4H3W-PRP9
creationtimestamp| type| source ---|---|--- 2026-08-06 05:31:22+00:00| seen| https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91...
CVE-2025-58486
creationtimestamp| type| source ---|---|--- 2026-08-06 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117046681751967940...
CVE-2026-17624
creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5r3poxb2g 2026-08-07 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msirs6gned2t...
GHSA-48HR-524C-V5W3
creationtimestamp| type| source ---|---|--- 2026-08-06 03:31:34+00:00| seen| https://gist.github.com/alon710/3d7b500e615305ceff4644e15070fc7a...
CVE-2026-15979
creationtimestamp| type| source ---|---|--- 2026-08-06 03:15:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msf37wyfuu2n...
GHSA-279X-MWFV-VCQV
creationtimestamp| type| source ---|---|--- 2026-08-06 02:32:30+00:00| seen| https://gist.github.com/alon710/a043326ccca63ec501e83cde63d8a11d...
CVE-2026-8790
creationtimestamp| type| source ---|---|--- 2026-08-06 02:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msexuj54rz26...
SUSE CVE-2026-64574
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...