MINI-XQXR-CJ86-VH74

Bulletin has no description...

MINI-CRG5-QWGJ-5XQR

Bulletin has no description...

MINI-RM2Q-4G4J-8GPF

Bulletin has no description...

MINI-M9HQ-6RQW-8PMP

Bulletin has no description...

MINI-JXJ2-5HG5-FPWG

Bulletin has no description...

MINI-R9HC-G5HQ-PGX3

Bulletin has no description...

MINI-759X-9JJH-MVHV

Bulletin has no description...

MINI-HPWP-XM8P-H5HC

Bulletin has no description...

MINI-V4VV-5688-RVGF

Bulletin has no description...

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

Description Bugsink’s issue list supports bulk actions such as resolving or muting selected issues. In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to...

Authorization Bypass Through User-Controlled Key

Overview bugsink is a Self-hosted Error Tracking Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the event lookup process. An attacker can access unauthorized event data by providing a valid event UUID belonging to another project. Note: Thi...

GHSA-VX2F-6M6H-9FRF Bugsink: Issue event views can show an event from another project if its UUID is known

Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view anoth...

CVE-2026-45777

creationtimestamp| type| source ---|---|--- 2026-06-05 20:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzp3hx2y2k 2026-06-06 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnmc35xzgd2f 2026-06-06 09:00:35+00:00| seen|...

CVE-2026-25622

creationtimestamp| type| source ---|---|--- 2026-06-05 20:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkysnfjio2u...

CVE-2025-62319

creationtimestamp| type| source ---|---|--- 2026-06-05 20:37:37+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnkyjvtcie22 2026-08-22 01:38:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3mtn5axxvck23...

CVE-2026-5411

creationtimestamp| type| source ---|---|--- 2026-06-05 20:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwitip3v2b 2026-06-06 00:00:14+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldv57rk32f 2026-06-14 23:16:10+00:00| seen|...

CVE-2025-56352

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 2024-02-18, the broker mishandles protocol violations during CONNECT packet parsing. When receiving a CONNECT packet with a zero-length Client ID while CleanSession is set to 0, the broker correctly replies with a CONNACK return code 0x0...

CVE-2026-45748

creationtimestamp| type| source ---|---|--- 2026-06-05 19:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkvyhgz6d2h 2026-06-05 21:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkzv7od4t25 2026-06-08 16:37:06+00:00| seen|...

CVE-2025-66769

A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service DoS via a crafted XFA packet...

CVE-2026-7581

A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09. This affects the function onprepare of the file app/main.py of the component CORS Policy. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack is possible to be carried out...