18388 matches found
CVE-2026-30950
creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:04+00:00| seen| https://t.me/GithubRedTeam/85076 2026-05-20 23:00:11+00:00| published-proof-of-concept| Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg 2026-05-21 03:00:06+00:00| seen|...
drupal-sa-core-2026-004-lab
SA-CORE-2026-004 — Lab, PoC, and Post-mortem Drupal core SQ...
GHSA-M6QJ-3MPP-57V8 Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-48061
creationtimestamp| type| source ---|---|--- 2026-05-20 16:46:22+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-3qmc-cj7q-62hv...
CVE-2026-48060
creationtimestamp| type| source ---|---|--- 2026-05-20 16:46:18+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-542p-wvx7-72m4 2026-07-28 22:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqiccl5662x...
CVE-2026-9087 Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login
A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...
CVE-2026-26028
creationtimestamp| type| source ---|---|--- 2026-05-20 15:52:46+00:00| published-proof-of-concept| https://github.com/cryptpad/cryptpad/security/advisories/GHSA-g2g4-47gv-p72v...
CVE-2026-35675
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w9xh-5f39-vq89 2026-05-28 17:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjubgrpa2h...
CVE-2026-35672
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gp95-j463-vv28...
CVE-2026-35671
creationtimestamp| type| source ---|---|--- 2026-05-20 15:46:17+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xvp4-phqj-cjr3 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878...
CVE-2026-35676
creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9qv9-8xv6-5p35 2026-05-28 17:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c...
CVE-2026-56268
creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2c9-mfw7-p8hw...
CVE-2026-48031
creationtimestamp| type| source ---|---|--- 2026-05-20 15:11:45+00:00| published-proof-of-concept| https://github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm 2026-08-03 19:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7bnbfowl2p...
Exploit for CVE-2026-46300
🔴 Fragnesia — CVE-2026-46300 Élévation de privilèges dans...
CVE-2026-48051
creationtimestamp| type| source ---|---|--- 2026-05-20 15:07:08+00:00| published-proof-of-concept| https://github.com/papra-hq/papra/security/advisories/GHSA-5g86-85rp-f9hx...