MINI-RXJ2-M655-47PC

Bulletin has no description...

MINI-7F57-3PJJ-VCVC

Bulletin has no description...

MINI-R2QW-XFR6-XWRC

Bulletin has no description...

MINI-4VV9-FWRJ-RWQ3

Bulletin has no description...

MINI-H73F-JFH6-J8Q5

Bulletin has no description...

MINI-98QW-276J-2FW9

Bulletin has no description...

MINI-V67C-39M3-WR54

Bulletin has no description...

MINI-584G-6CQG-RFWJ

Bulletin has no description...

MINI-6VH5-C763-3GJ9

Bulletin has no description...

MINI-CPXR-566V-7V76

Bulletin has no description...

MINI-4GG7-P72G-5HQ2

Bulletin has no description...

MINI-9MM4-HQRR-J8RJ

Bulletin has no description...

MINI-W65Q-PPP7-9F35

Bulletin has no description...

MINI-J4R6-FPQ5-G6R9

Bulletin has no description...

MINI-9HG5-JQ6R-MR65

Bulletin has no description...

MINI-C6QX-326C-X7V7

Bulletin has no description...

CVE-2026-13480 Out-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handler

The LoRaWAN TS004 Fragmented Data Block Transport handler fragtransportpackagecallback in subsys/lorawan/services/fragtransport.c parses downlink command bytes without validating that enough payload bytes remain before each access. The loop's only bound is rxpos fragsize, capped at...

ECHO-D7AB-3F98-D4D5 Fixed by bumping the vendored OpenJPH (HTJ2K codec). 3.1.13 has no HTJ2K support and ships no external/OpenJPH.

Bulletin has no description...

WordPress Appointment Hour Booking plugin < 1.5.88 - Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability

Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability discovered by Researcher1: Alessandro Greco aka Aleff; Researcher2: Giovambattista Ianni; Company/Organization: University of Calabria UNICAL in WordPress Plugin Appointment Hour Booking versions 1.5.88...

Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...