MINI-MWCG-VC2M-MMFQ

Bulletin has no description...

MINI-24X7-4RPP-4C5P

Bulletin has no description...

EUVD-2026-51991

Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both resolve through a generic web.Auth.GetID interface, a link-share JWT whose numeric ID equals a target user's ID is...

CVE-2025-71400

CVE-2025-71400 affects better-auth passkey up to version 1.3.x (before 1.4.0). The vulnerability is an insecure direct object reference in the delete-passkey endpoint that allows authenticated users to delete arbitrary passkeys by ID, enabling attackers with valid sessions to remove other users’ ...

EUVD-2025-210591

better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey deletion endpoint that allows authenticated users to delete arbitrary passkeys by ID. Attackers with valid sessions can submit crafted requests to the delete-passkey endpoint with...

MINI-FJ33-C3JR-2QCR

Bulletin has no description...

CVE-2026-14864

creationtimestamp| type| source ---|---|--- 2026-08-02 11:34:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3vbkl2dd24...

CVE-2026-16062

creationtimestamp| type| source ---|---|--- 2026-08-02 10:50:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ss6ptam2v...

MINI-2XV6-548P-FRGV

Bulletin has no description...

MINI-FRGV-H4J5-44WW

Bulletin has no description...

MINI-HP9H-5P3H-8M3X

Bulletin has no description...

MINI-329W-X9X3-3PV9

Bulletin has no description...

MINI-WP9G-X75P-MGRV

Bulletin has no description...

MINI-CJ9M-55W5-8727

Bulletin has no description...

MINI-WG43-9X2G-H57H

Bulletin has no description...

MINI-7584-G9GX-P3R4

Bulletin has no description...

MINI-9GPJ-2XX7-CM24

Bulletin has no description...

MINI-5GJ6-HW7F-HMC5

Bulletin has no description...

MINI-4FFF-V756-HRQ8

Bulletin has no description...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...