18523 matches found
CVE-2026-54431 Improper Data Validation in liboauth2
In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...
CVE-2026-54431 Improper Data Validation in liboauth2
In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...
CVE-2026-54431
In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2tokenverify function returns success for a malformed DPoP proof that...
bak-exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
CVE-2026-50143
creationtimestamp| type| source ---|---|--- 2026-07-02 00:35:02+00:00| published-proof-of-concept| https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm...
PT-2026-54958
In liboauth2 the Demonstrating Proof-of-Possession DPoP verifier accepts a proof whose JSON Web Key jwk header contains private key material. RFC 9449 section 4.3 step 7 requires the verifier to reject such a proof but oauth2 token verify function returns success for a malformed DPoP proof that...
CVE-2026-49998
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:18+00:00| published-proof-of-concept| https://github.com/centrifugal/centrifugo/security/advisories/GHSA-g6vg-wj8f-48cj 2026-07-16 23:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsf7jmkdr2m...
CVE-2026-48819
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:16+00:00| published-proof-of-concept| https://github.com/hey-api/hey-api/security/advisories/GHSA-hhx9-57xq-r5rw...
CVE-2026-48824
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:13+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-28pq-6qxg-wg5r...
CVE-2026-50151
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:11+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7 2026-07-18 16:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwn4wyzpq23...
CVE-2026-50162
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:09+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-8xwf-rjm4-xvhv...
CVE-2026-50163
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:07+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-fxhp-mv3v-67qp...
CVE-2026-50138
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:05+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-3whc-qvhv-xqjp...
CVE-2026-50139
creationtimestamp| type| source ---|---|--- 2026-07-01 22:35:03+00:00| published-proof-of-concept| https://github.com/goshs-labs/goshs/security/advisories/GHSA-j48m-h7xq-2xpj...
CVE-2026-49857
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:16+00:00| published-proof-of-concept| https://github.com/ymw0407/auth-fetch-mcp/security/advisories/GHSA-pvrj-8cg3-j5f8...
CVE-2026-49864
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:13+00:00| published-proof-of-concept| https://github.com/butlerx/wetty/security/advisories/GHSA-p26j-h7wj-r568...
CVE-2026-49986
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:11+00:00| published-proof-of-concept| https://github.com/cdeust/Cortex/security/advisories/GHSA-gvpp-v77h-5w8g...
CVE-2026-49987
creationtimestamp| type| source ---|---|--- 2026-07-01 20:35:09+00:00| published-proof-of-concept| https://github.com/yamadashy/repomix/security/advisories/GHSA-9mm9-rqhj-j5mx 2026-07-15 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmqxdh3a22...