33899 matches found
CVE-2026-32853
creationtimestamp| type| source ---|---|--- 2026-08-02 19:54:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ms4r6npegk2r...
SUSE CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-67309
creationtimestamp| type| source ---|---|--- 2026-08-02 14:46:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms47yxells24 2026-08-06 18:35:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8rxv-jg7p-wvg3 2026-08-06 19:32:23+00:00| seen|...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit
CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Ti...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
CVE-2026-15206
The SMS Alert Order Notifications WordPress plugin (versions
CVE-2026-15206 SMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-Mobile
The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...
CVE-2026-18572
Keycloak is affected by a vulnerability in its time-based access control. A flaw allows a user to include a fake time value in an authorization request, which overrides the actual server time and bypasses time-based restrictions, potentially granting access to protected resources outside allowed ...
CVE-2026-18572 Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
CVE-2026-18572 Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
EUVD-2026-51926
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
Deep-Live-Cam v2.7-ultimate
Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...
VulnCheck KEV: CVE-2023-54359
WordPress adivaha Travel Plugin 2.3 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pid' GET parameter. Attackers can send requests to the /mobile-app/v3/ endpoint with crafted 'pid'...
PT-2026-67137
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Keycloak authorization services allow administrators to restrict resource access using time policies. A flaw exists where a user can include a fake time value within an authorization request...
Performance Analysis of Machine Learning Algorithms for Predicting Malware
Malware poses a persistent and evolving threat to modern computing systems, making accurate and timely detection a critical cybersecurity challenge. Traditional signature-based antivirus solutions often fail to identify newly emerging malware, leaving systems vulnerable until updated signatures...
CVE-2026-18572: Incorrect Authorization
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours. A flaw was discovered where a user can include a fake time value in their authorization request that overrides the...
PT-2026-67061
The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...