20916 matches found
PT-2026-42602
Impact A logic flaw in BlockInclusionProof::is block proven causes the function to return true without performing any cryptographic verification when get interlink hops yields an empty hop list. This occurs when the target block is at the election block position immediately preceding the election...
📄 BookStack 25.12.1 Denial of Service
BookStack version 25.12.1 suffers from a denial of service vulnerability. Exploit Title: BookStack 25.12.1 - Denial of Service Search Terms Resource Exhaustion Date: 2026-04-29 Exploit Author: Gabriel Rodrigues TEXUGO Vendor Homepage: https://www.bookstackapp.com Software Link:...
CVE-2026-48113
creationtimestamp| type| source ---|---|--- 2026-05-20 23:29:51+00:00| published-proof-of-concept| https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw 2026-08-03 21:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nkjzej2prh6t...
CVE-2026-46705
creationtimestamp| type| source ---|---|--- 2026-05-20 22:48:47+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-hpv4-5h6f-wqr3 2026-06-10 23:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxsulhtsc2f...
poc-gitcliff-injection
po...
CVE-2026-30950
creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:04+00:00| seen| https://t.me/GithubRedTeam/85076 2026-05-20 23:00:11+00:00| published-proof-of-concept| Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg 2026-05-21 03:00:06+00:00| seen|...
drupal-sa-core-2026-004-lab
SA-CORE-2026-004 — Lab, PoC, and Post-mortem Drupal core SQ...
Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
GHSA-M6QJ-3MPP-57V8 Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-48061
creationtimestamp| type| source ---|---|--- 2026-05-20 16:46:22+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-3qmc-cj7q-62hv...
CVE-2026-48060
creationtimestamp| type| source ---|---|--- 2026-05-20 16:46:18+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-542p-wvx7-72m4 2026-07-28 22:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqiccl5662x...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-9087 Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-26028
creationtimestamp| type| source ---|---|--- 2026-05-20 15:52:46+00:00| published-proof-of-concept| https://github.com/cryptpad/cryptpad/security/advisories/GHSA-g2g4-47gv-p72v...
CVE-2026-35675
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w9xh-5f39-vq89 2026-05-28 17:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjubgrpa2h...
CVE-2026-35672
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gp95-j463-vv28...
CVE-2026-35671
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:17+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xvp4-phqj-cjr3 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878...
CVE-2026-35676
creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9qv9-8xv6-5p35 2026-05-28 17:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c...