CGA-8H28-VXGJ-W94V

Bulletin has no description...

MarkUs 安全漏洞

MarkUs is an open-source Ruby on Rails and React web application used for submitting and grading student assignments. Versions of MarkUs prior to 2.9.4 contained a security vulnerability due to the lack of size or item quantity limits when extracting zip files...

MINI-WM46-XW29-WMRH

Bulletin has no description...

MINI-V2C9-CQ35-GFG4

Bulletin has no description...

MINI-R57P-WWGP-VM6Q

Bulletin has no description...

MINI-QFJ5-VCPH-MR6H

Bulletin has no description...

MINI-PR78-2365-C7RH

Bulletin has no description...

MINI-P82C-QVMR-WG2P

Bulletin has no description...

MINI-F657-R5JM-R3XR

Bulletin has no description...

MINI-CG26-HCPM-76FX

Bulletin has no description...

MINI-6XMX-96JH-55Q4

Bulletin has no description...

MINI-5V4P-R594-8QGH

Bulletin has no description...

MINI-5532-FRPR-8M6R

Bulletin has no description...

MINI-5P4V-Q5H9-R2QF

Bulletin has no description...

CVE-2026-26272

HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting XSS vulnerability exists in the item attachment upload functionality. The application does not properly validate or restrict uploaded file types, allowing an authenticated user to upload...

CVE-2026-26272 HomeBox affected by Stored XSS via HTML/SVG Attachment Upload

HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting XSS vulnerability exists in the item attachment upload functionality. The application does not properly validate or restrict uploaded file types, allowing an authenticated user to upload...

EUVD-2026-9333

HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting XSS vulnerability exists in the item attachment upload functionality. The application does not properly validate or restrict uploaded file types, allowing an authenticated user to upload...

CVE-2026-26272

HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting XSS vulnerability exists in the item attachment upload functionality. The application does not properly validate or restrict uploaded file types, allowing an authenticated user to upload...

CVE-2026-26702

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitemreuse.php...

(Pwn2Own) Music Assistant _update_library_item External Control of File Path Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Music Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the updatelibraryitem method. The issue results from the lack of proper...