75347 matches found
MINI-M53P-MG9G-Q694
Bulletin has no description...
MINI-2HR9-5WPH-X3WJ
Bulletin has no description...
MINI-F6GW-6JFH-9883
Bulletin has no description...
MINI-28H7-MGPJ-9PJQ
Bulletin has no description...
MINI-R2P2-6H9R-4V6J
Bulletin has no description...
CGA-WVPG-JCVH-M274
Bulletin has no description...
CGA-4CC2-C878-8JM9
Bulletin has no description...
CGA-VVQX-MMJR-R467
Bulletin has no description...
Malicious code in bimi-maker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4e6202887cfa87e6dcff6e37af854445a0e44f38b25ef6d3e40fec06cc8b5f On npm install, the package's preinstall hook runs node index.js, which executes whoami and id via childprocess and collects os.hostname, os.userInfo...
CVE-2026-15416
creationtimestamp| type| source ---|---|--- 2026-07-14 11:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5koihty24 2026-07-20 04:40:33+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2i2vucuw2g 2026-07-20 04:40:35+00:00| seen|...
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environments, without ever...
CVE-2026-15389 Inadequate access control in Sesame Time session management
A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...
CVE-2026-15389 Inadequate access control in Sesame Time session management
A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...
CVE-2026-15678
creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...
ECHO-A273-202B-9560 Windows-only. The flaw is that 7-Zip for Windows fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because a RAR5 STM record named ':Zone.Identifier:$DATA' / '::$DATA' is canonicalized by NTFS transparent Alternate Data Streams to overwrite the propagated Internet-zone marker / default data stream, defeating SmartScreen/MotW. MotW, Zone.Identifier ADS and NTFS :$DATA canonicalization do not exist on Linux (ntfs-3g does not do transparent ADS canonicalization), so the Echo Linux build is not affected. Debian marks trixie <ignored> for the same reason.
Bulletin has no description...
CGA-2WJH-6CCQ-FFGC
Bulletin has no description...
CGA-WW88-C2FM-562F
Bulletin has no description...
CVE-2026-9561
creationtimestamp| type| source ---|---|--- 2026-07-14 08:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlt3z6gnm2e...