CVE-2026-60153

creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-46926

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 08:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpnmvcmxw52a...

CVE-2026-46868

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...

CVE-2026-53471

CVE-2026-53471 affects the migration-planner project, specifically the agent-api middleware. The UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the source_id claim in JWTs against the requested source ID. Root cause: missing validation allows an authenticated attacker with ...

CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...

CVE-2026-20821

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-20840

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-02-05 09:32:03+00:00| seen|...

CVE-2025-47162

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:46:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbnufxn5z23 2025-06-11 07:01:39+00:00| exploited|...

CVE-2025-32712

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review...

CVE-2025-4476

creationtimestamp| type| source ---|---|--- 2025-05-16 18:03:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518825078773948 2025-05-16 19:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcpzcyo2d2p 2025-10-09 17:51:29+00:00| seen|...

CVE-2025-47419

creationtimestamp| type| source ---|---|--- 2025-05-06 21:21:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15231 2025-05-06 21:25:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462996084887280 2025-05-06 22:26:57+00:00| seen|...

CVE-2025-23245

creationtimestamp| type| source ---|---|--- 2025-04-25 03:23:17+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnmbhiqp2k22 2025-05-01 14:15:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14297 2025-05-01 14:51:49+00:00| seen|...

CVE-2025-28399

creationtimestamp| type| source ---|---|--- 2025-04-15 22:28:04+00:00| seen| https://t.me/cvedetector/22998 2025-04-16 16:48:24+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348661162248961...

CVE-2024-41166

creationtimestamp| type| source ---|---|--- 2025-02-12 22:18:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7d3d4ad2c 2025-02-12 23:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4171 2025-02-13 00:43:19+00:00| seen|...

CVE-2025-22704

creationtimestamp| type| source ---|---|--- 2025-02-03 15:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtl6sbvo2p 2025-02-03 15:40:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113940708321242887 2025-08-26 18:36:19+00:00| seen|...

CVE-2024-53007

creationtimestamp| type| source ---|---|--- 2025-01-31 07:59:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113921908314798812 2025-01-31 08:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzkmx4n4q2b 2025-01-31 11:29:57+00:00| seen|...

CVE-2024-56023

creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2ruhdyk25 2025-01-02 19:08:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113760332027706244...

CVE-2023-46073

creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2khydzn2i 2025-01-02 13:08:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113758914788883417...