24694 matches found
CVE-2026-64652
The CVE covers GitHub CLI (gh) prior to v2.97.0, where gh auth status could reveal part of certain tokens in output. Affected tokens include fine-grained PATs (github_pat_) and GitHub App tokens (ghs_ and ghu_*), plus the Actions GITHUB_TOKEN, whenever the token format contains an underscore afte...
CVE-2026-64592
creationtimestamp| type| source ---|---|--- 2026-08-06 17:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117049769070717664...
CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-53977
creationtimestamp| type| source ---|---|--- 2026-08-06 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgjdzwjiu2z...
CVE-2026-11361 Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
The Formidable Forms WordPress plugin before 6.32.1 does not properly validate the status of a PayPal subscription payment before marking it complete, allowing unauthenticated users to bypass payment and trigger paid form actions — such as digital content access, license delivery, and membership...
GHSA-3X6R-WXXG-53VV
creationtimestamp| type| source ---|---|--- 2026-08-06 15:31:19+00:00| seen| https://gist.github.com/alon710/164398037554120d630a453295ebf3cc...
CVE-2026-20288
creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...
CVE-2026-18657
creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:57+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgtfn5x2y...
CVE-2026-18649
creationtimestamp| type| source ---|---|--- 2026-08-06 12:02:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msfyo4ynu22q 2026-08-06 12:02:50+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048457828808782 2026-08-07 10:12:54+00:00|...
CVE-2026-64587
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...
UBUNTU-CVE-2026-64587
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...
postfix: buffer over-read via malformed enhanced status code
A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...
Important: Red Hat Security Advisory: postfix security update
An update for postfix is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
ROOT-OS-UBUNTU-2404-CVE-2026-23351 CVE-2026-23351 in linux - Patched by Root
Root has patched CVE-2026-23351 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-23261 CVE-2026-23261 in linux - Patched by Root
Root has patched CVE-2026-23261 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31487 CVE-2026-31487 in linux - Patched by Root
Root has patched CVE-2026-31487 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43115 CVE-2026-43115 in linux - Patched by Root
Root has patched CVE-2026-43115 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31578 CVE-2026-31578 in linux - Patched by Root
Root has patched CVE-2026-31578 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...