MINI-9CV2-FCGX-2FM7

Bulletin has no description...

MINI-4883-FXP6-2664

Bulletin has no description...

MINI-QJG2-38C2-9HQ7

Bulletin has no description...

MINI-WRH7-H6V7-MWG9

Bulletin has no description...

MINI-H9W2-CM63-G598

Bulletin has no description...

MINI-HGJM-FJF4-78VR

Bulletin has no description...

MINI-3QMC-8RRF-JCW7

Bulletin has no description...

MINI-WP7C-C254-XPM3

Bulletin has no description...

MINI-3WQ6-JVJ7-32JX

Bulletin has no description...

MINI-56FP-RWGF-VC7V

Bulletin has no description...

Malicious code in autotel-tanstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ab5510b146ce55059a16ae8610a9ca1c6ad6fffd42ad2a9c4cb09c2d11675f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @vapi-ai/server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e1edd9922bb8b3962aad95b2bb1bfa39c3ec47651fe4863035111fc292dcfe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5234 Malicious code in awaitly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b437ec90b9b48314676b67f08b3ab9a54e1d3b787aa17d668dd0459f2cf68b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-38579

Multiple reflected Cross-Site Scripting XSS vulnerabilities in damasac thaipalliativelte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via the idFormMain parameter line 24, the id parameter lines 25, 75, and the ptidkey parameter lines 26, 42 in...

Linux Distros Unpatched Vulnerability : CVE-2026-10917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process t...

CVE-2026-38579

Multiple reflected Cross-Site Scripting XSS vulnerabilities in damasac thaipalliativelte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via the idFormMain parameter line 24, the id parameter lines 25, 75, and the ptidkey parameter lines 26, 42 in...

DAMASAC KKU Thai Palliative 跨站脚本漏洞

Thai Palliative is a modified version of the PHP framework developed by DAMASAC KKU. Versions of Thai Palliative 3.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the fact that the parameters idFormMain, id, and ptidkey were passed as raw user input in the...

PT-2026-47019

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. The File Manager functionality contains a Broken Access Control issue resulting from...

PT-2026-47087

Name of the Vulnerable Software and Affected Versions praisonai-platform affected versions not specified Description An Insecure Direct Object Reference exists in the agent CRUD endpoints. The system validates if a user is a member of a workspace but fails to verify if the requested agent actuall...

7-Zip >= 9.34 < 26.01 WIM / Ar SYMDEF OOB Read (GHSL-2026-115_GHSL-2026-122)

The version of 7-Zip installed on the remote Windows host is = 9.34 and prior to 26.01. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read exists in 7-Zip's WIM SecurityId handling, which can lead to a crash when processing a crafted WIM image. CVE-2026-48103 - An...