10725 matches found
MINI-XJFW-PQXR-4Q8P
Bulletin has no description...
MINI-X7M2-2HCR-MMGM
Bulletin has no description...
MINI-43M2-GJG7-J2VR
Bulletin has no description...
MINI-WW7G-28CH-3HQG
Bulletin has no description...
MINI-RX4W-C9G2-95X4
Bulletin has no description...
MINI-R69M-8RX4-8R6H
Bulletin has no description...
MINI-MQC6-FMFM-X85Q
Bulletin has no description...
MINI-CHHM-XG37-G9M9
Bulletin has no description...
MINI-RG96-WP44-JGPP
Bulletin has no description...
CGA-5G9Q-HXX2-VMRQ
Bulletin has no description...
WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification vulnerability
Missing Authorization to Unauthenticated Arbitrary Form Entry Modification vulnerability discovered by Michael Iden Mickhat in WordPress Plugin NEX-Forms versions = 9.2.2...
CVE-2026-55780 NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...
CVE-2026-55780 NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...
CVE-2026-55780
NanaZip (7‑Zip derivative) prior to version 6.5.1749.0 is vulnerable due to its .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp, which sizes the extraction buffer from the bundle entry Size field without validating against the real file size. This allows an attacker...
MINI-PFQ6-398Q-V8XJ
Bulletin has no description...
MINI-X4QJ-FG76-6VHX
Bulletin has no description...
MINI-X9C5-5HVG-R988
Bulletin has no description...
MINI-4FH3-J596-H6WH
Bulletin has no description...
Remote Code Execution
Craft CMS is vulnerable to remote code execution RCE. The vulnerability is due to unsafe rendering of user-controlled data as an unsandboxed Twig template, where the Referer HTTP header is compiled without sandboxing during entry saves, allowing authenticated attackers to execute arbitrary code o...