72460 matches found
CVE-2026-54563
creationtimestamp| type| source ---|---|--- 2026-07-15 17:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22 2026-08-26 16:35:10+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp...
CVE-2026-53516 Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...
CVE-2026-53516 Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...
CVE-2026-53516 Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...
CVE-2026-53516
Summary: CVE-2026-53516 affects Better Auth (
CVE-2026-20150
creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-15 19:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22 2026-07-16 13:00:29+00:00| seen|...
CVE-2026-60062
creationtimestamp| type| source ---|---|--- 2026-07-15 17:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7hsjask2o 2026-07-16 13:00:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t 2026-07-18 20:00:40+00:00| seen|...
CVE-2026-60065
creationtimestamp| type| source ---|---|--- 2026-07-15 16:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6j4bs6f2m 2026-07-16 13:00:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t...
CVE-2026-52865
creationtimestamp| type| source ---|---|--- 2026-07-15 16:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6emfm6t2m 2026-07-16 13:00:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t 2026-07-18 12:02:16+00:00| seen|...
CVE-2026-54562
creationtimestamp| type| source ---|---|--- 2026-07-15 16:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6ah3co52i...
OPENSUSE-SU-2026:21360-1 Security update for hostapd
This update for hostapd fixes the following issues: Changes in hostapd: - CVE-2026-58374: Missing multi-link parsing validation in wpasupplicant and hostapd bsc1269892...
CVE-2026-54560
creationtimestamp| type| source ---|---|--- 2026-07-15 16:41:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5yw2ad72s...
CVE-2026-61457
creationtimestamp| type| source ---|---|--- 2026-07-15 16:34:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5niv7ff2i...
CVE-2026-45806
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data/workspace/media.cljs into the backend RPC method :create-file-media-object-from-url in...
CVE-2026-61835
creationtimestamp| type| source ---|---|--- 2026-07-15 16:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qtot4l2i...
BIT-DISCOURSE-2026-55424 Discourse: Topic featured link susceptible to stored XSS
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not sufficiently normalized and escaped before being rendered in the topic list, allowing a user who can set a featured link to inject JavaScript when default Content...
CVE-2026-50148
creationtimestamp| type| source ---|---|--- 2026-07-15 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp3b2jai22u...
CVE-2026-56398
creationtimestamp| type| source ---|---|--- 2026-07-15 15:47:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2z4ioe22u 2026-07-17 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqtunk4xan2u...