13165 matches found
MINI-2RC3-G385-9PFR
Bulletin has no description...
MINI-M8CW-8R22-PVG9
Bulletin has no description...
MINI-CMQ5-WPX7-76GG
Bulletin has no description...
MINI-87RC-V2PX-GQX2
Bulletin has no description...
MINI-4G55-MWP2-G23P
Bulletin has no description...
MINI-V24C-42Q7-57V4
Bulletin has no description...
MINI-325V-J386-XPWP
Bulletin has no description...
MINI-VF49-W625-XF64
Bulletin has no description...
MINI-MX7M-CRMC-8M4C
Bulletin has no description...
MINI-FPPM-XG8Q-2MP8
Bulletin has no description...
MINI-R4F5-W25Q-GQWJ
Bulletin has no description...
MINI-MX62-MR68-8VW3
Bulletin has no description...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the image process in open-sse/translator/concerns/image.js. An attacker can access internal-only HTTP services by...
CVE-2026-56676
9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy ca...
PYSEC-2026-3443
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-22660
FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares...
patchtriage
PatchTriage !CIhttps://github.com/d01ki/patchtriage/actio...
MINI-Q4XX-3G26-FQPF
Bulletin has no description...