20850 matches found
EUVD-2026-63487
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...
CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...
CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...
GHSA-P9R8-2Q67-FP86
creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:04+00:00| published-proof-of-concept| Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VEo1sscCDdPigg 2026-08-20 16:00:50+00:00| seen| https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html 2026-08-21 00:00:09+00:00|...
CVE-2026-76070
creationtimestamp| type| source ---|---|--- 2026-08-20 05:00:03+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-21 00:00:10+00:00| published-proof-of-concept| Telegram/XofvqRV5hkEKine-AqSThWE3tYrgZQJPu8IyHlpngfjWOA 2026-08-22 19:00:05+00:00| seen...
CVE-2026-15315
creationtimestamp| type| source ---|---|--- 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-09-16 16:32:56+00:00| seen|...
CVE-2026-53959
creationtimestamp| type| source ---|---|--- 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/OaQKbbdvw00bB0UsV4uIS74p-Dstov7w7gsjctrALY9lZiQ 2026-08-20 03:00:04+00:00| published-proof-of-concept| Telegram/70I5ZXCQ9tuhykRUfpeQOhK2E7uKn9kN9IGVXWKzWNyM 2026-08-21 00:00:12+00:00|...
cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay
cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay...
Replay Attack
Overview org.springframework.security:spring-security-oauth2-jose is a provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Replay Attack through the DPoPProofJwtDecoderFactory. An attacker can gain unauthorized access and impersonate a victim...
CVE-2026-63123
creationtimestamp| type| source ---|---|--- 2026-08-19 22:35:02+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-rgr9-r7mj-mf6x...
CVE-2026-54688
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:10+00:00| published-proof-of-concept| https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-q87f-qc2r-2gw4...
CVE-2026-67581
ZenHive mpp (Elixir HTTP 402 payment library) versions 0.3.0 through before 0.6.3 contain an authentication bypass by capture-replay in the EVM payment method. The function MPP.Methods.EVM.verify/2 matches a transfer solely on token, recipient, and amount without binding the proof to the specific...
CVE-2026-70666
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:18+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-xpmj-wjcp-6pww 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...
CVE-2026-71303
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:14+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-v5rc-cpwc-cfpr 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...
CVE-2026-71317
creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:07+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-g7p5-89mh-248h...
CVE-2026-63640
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:11+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-q4gh-4ffp-5cg8...
GHSA-VJF8-9FX6-MV6X Triton VM Soundness Vulnerability due to Missing Constraint
The instruction spongeabsorbmem Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction spongeabsorbmem to hash memory data can be given a proof for a...
CVE-2026-63641
creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:10+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-w26r-fwg8-rcp3...
CVE-2024-40275
creationtimestamp| type| source ---|---|--- 2026-08-18 12:00:03+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU 2026-08-19 00:00:26+00:00| published-proof-of-concept| Telegram/mmWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU...