CVE-2026-44586

SiYuan is an open-source personal knowledge management system. From 2.1.12 to before 3.7.0. SiYuan's Bazaar marketplace renders package author metadata from the public bazaar stage feed into HTML without escaping. In the desktop app this becomes stored XSS, and because SiYuan's Electron windows a...

MINI-3CHG-9PJ3-4R3M

Bulletin has no description...

MINI-HRR7-78XQ-83MQ

Bulletin has no description...

MINI-87GM-37XR-PCQW

Bulletin has no description...

MINI-G2CQ-WQG6-H43C

Bulletin has no description...

CVE-2026-50234

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...

CVE-2026-50234 Lyrion Music Server 9.2.0 Path Traversal File Read

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...

CVE-2026-50234

Affected product: Lyrion Music Server 9.2.0. Vulnerability: Path traversal in the web server context allowing unauthenticated attackers to read arbitrary files by manipulating file path parameters. Root cause / vector: Directory traversal outside the intended directory structure. Impact: Confiden...

CVE-2026-50234

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...

MINI-P6GP-2J9G-5GVG

Bulletin has no description...

MINI-JGX5-G2JQ-8MFP

Bulletin has no description...

MINI-WJ5X-P6M5-F54H

Bulletin has no description...

MINI-6FQ9-5G36-724H

Bulletin has no description...

MINI-G4RM-7FRQ-RPW2

Bulletin has no description...

MINI-MH3V-GH53-56XV

Bulletin has no description...

MINI-5XGQ-8WHJ-CFXX

Bulletin has no description...

MINI-V2J6-6RHM-RWXX

Bulletin has no description...

MINI-V5J2-H9CM-2G32

Bulletin has no description...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept...

MINI-MV72-JF67-4GXX

Bulletin has no description...