321193 matches found
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
Exploit for CVE-2026-18963
CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...
GHSA-8JJ7-4V57-FRF5
creationtimestamp| type| source ---|---|--- 2026-08-24 23:38:47+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtuhygrmgv2u...
CVE-2026-54623
creationtimestamp| type| source ---|---|--- 2026-08-24 23:38:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtuhyepjeo2x...
CVE-2026-78262
creationtimestamp| type| source ---|---|--- 2026-08-24 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugwybr742j...
CVE-2026-77337
creationtimestamp| type| source ---|---|--- 2026-08-24 23:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugwwvdb72p...
CVE-2026-32563
creationtimestamp| type| source ---|---|--- 2026-08-24 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugf4e7rx2f...
CVE-2026-32559
creationtimestamp| type| source ---|---|--- 2026-08-24 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtugf2wbu72b...
CVE-2026-78265
creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufu62l7y24 2026-08-24 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuhit53l42p...
CVE-2026-78284
creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtuftx4wgg2r...
CVE-2026-32555
creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuftb6did2m...
CVE-2026-32554
creationtimestamp| type| source ---|---|--- 2026-08-24 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuft7ruze23...
CVE-2026-78435
creationtimestamp| type| source ---|---|--- 2026-08-24 22:34:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fwsxy2wk2bows...
CVE-2026-78282
creationtimestamp| type| source ---|---|--- 2026-08-24 22:32:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/agynik5ssy6qr...
CVE-2026-78267
creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...
Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...
CVE-2026-78268
creationtimestamp| type| source ---|---|--- 2026-08-24 22:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p...
CVE-2026-78434
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...