CVE-2026-15943 Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing...

CVE-2026-41993

creationtimestamp| type| source ---|---|--- 2026-07-17 11:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqto3sym5k2u...

CVE-2018-12419

creationtimestamp| type| source ---|---|--- 2026-07-17 10:00:04+00:00| seen| https://t.me/makrushin/80 2026-07-18 00:00:26+00:00| seen| https://t.me/makrushin/80...

CVE-2026-12393

creationtimestamp| type| source ---|---|--- 2026-07-17 08:22:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtd3hngxz2u...

CVE-2026-11575

creationtimestamp| type| source ---|---|--- 2026-07-17 08:17:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcsizabo2x 2026-07-19 13:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqytjwb6uq2m...

CVE-2026-13402

creationtimestamp| type| source ---|---|--- 2026-07-17 08:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtbxnelwi2t...

CVE-2026-15380

creationtimestamp| type| source ---|---|--- 2026-07-17 07:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtbjaewa325...

CVE-2026-9810

creationtimestamp| type| source ---|---|--- 2026-07-17 07:51:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtbdb7t3m24 2026-07-17 13:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqtszon5z62j 2026-07-19 13:00:23+00:00| seen|...

CVE-2026-15379

creationtimestamp| type| source ---|---|--- 2026-07-17 07:48:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtb5v3lia25...

CVE-2026-11324

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-47085

A flaw was found in Cyrus IMAP cyrus-imapd. A remote attacker could exploit a vulnerability related to URLAUTH token forgery, caused by a missing mailbox key. This could allow the attacker to gain unauthorized read access to a victim's mailbox. The likelihood of exploitation is low due to the...

CVE-2026-47087

A flaw was found in Cyrus IMAP. The URLAUTH mechanism in Cyrus IMAP through version 3.12.2 does not properly revoke access for an authorizer. This allows a previously authorized user to retain access via a URLAUTH URL, even after their authorization has been revoked, potentially leading to...

CVE-2026-62202

creationtimestamp| type| source ---|---|--- 2026-07-17 03:28:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqssmwu5wm2n...

CVE-2026-62228

creationtimestamp| type| source ---|---|--- 2026-07-17 02:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsq4tvjyu2o 2026-07-19 16:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lpx7vu2m...

CVE-2026-11324

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-45129

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-11324 WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-11324 WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-11324 WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-62214

OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious serviceUrl values through configured inpu...