CVE-2025-71403

creationtimestamp| type| source ---|---|--- 2026-08-01 13:47:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrzm7fofvq22...

CVE-2026-67327

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

EUVD-2026-51841

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

CVE-2026-67327

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

CVE-2026-67327 better-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

CVE-2026-67327

Better-Auth before 1.6.22 is vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers a victims email with a chosen password; the account remains unverified. When the victim signs in later...

CVE-2026-67327 better-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP

better-auth versions = 1.1.3 and = 1.7.0-beta.0 and 1.7.0-beta.10 are vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers an account with the victim's email address and an...

CVE-2026-18344

creationtimestamp| type| source ---|---|--- 2026-08-01 10:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hcboak6644dts 2026-08-01 17:43:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzfowyul2l 2026-08-01 17:44:05+00:00| seen|...

CVE-2026-16684

creationtimestamp| type| source ---|---|--- 2026-08-01 10:02:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cl4yc4qcqanzn 2026-08-01 17:45:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzkc2pmo2b 2026-08-01 17:46:30+00:00| seen|...

CVE-2026-49779

creationtimestamp| type| source ---|---|--- 2026-08-01 09:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrz6mr74fv2t...

CVE-2026-61182

creationtimestamp| type| source ---|---|--- 2026-08-01 09:42:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz6j2jnu62l...

CVE-2026-16144

The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.20 via the savedata function. This is due to insufficient validation of the 'thisPermalink' field value before it overwrites a trusted callab...

CVE-2026-14596

The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthenticated attackers to send a target user a legitimately-formatted reset email whose link points to an...

CVE-2026-58185

creationtimestamp| type| source ---|---|--- 2026-08-01 05:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryp5fzpel2f...

CVE-2026-56045

creationtimestamp| type| source ---|---|--- 2026-08-01 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrynud5suh2b...

GHSA-34RH-WP3J-6CXC

creationtimestamp| type| source ---|---|--- 2026-08-01 04:31:50+00:00| seen| https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb...

CVE-2026-7623

creationtimestamp| type| source ---|---|--- 2026-08-01 04:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hdra7q73om5rn...

CVE-2026-13362

creationtimestamp| type| source ---|---|--- 2026-08-01 03:54:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gcdixbwv2q47d...

MAL-2026-11492 Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...

Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f4885b543da795140d0ac9c44423c6ecadf74c744c1f322f9d1a5263fe4f2 No static or traced behavioral signals of supply-chain attack were observed in this package. There is no evidence of install-time or import-time code...