15133 matches found
MINI-FHCP-53PW-RW73
Bulletin has no description...
K000162034: Node.js vulnerability CVE-2026-48617
Security Advisory Description A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported...
MINI-PC9Q-XRRM-MPFJ
Bulletin has no description...
MINI-9524-PW68-G44M
Bulletin has no description...
MINI-338M-4WH4-9PQM
Bulletin has no description...
CVE-2026-59098: Authorization Bypass Through User-Controlled Key
LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-augmented-generation semantic search functionality that allows authenticated attackers to access other users' data by exploiting missing user-identifier predicates in the chunk model semanticSearch method...
PT-2026-55196
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...
PT-2026-55406
Summary Embedded runner policy could be confused by provider aliases. In affected versions, a request using provider aliases could compare policy against an alias instead of the canonical provider identity. This advisory is scoped to the named feature and configuration. It does not change...
PT-2026-55423
Summary Combined POSIX shell options could confuse exec revalidation. In affected versions, a command request using combined shell flags could parse approval-time and execution-time shell options differently. This advisory is scoped to the named feature and configuration. It does not change...
CVE-2026-38970: Uncontrolled Recursion
pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...
MINI-RGC3-2F4P-JPHP
Bulletin has no description...
MINI-V76X-355H-FCJQ
Bulletin has no description...
MINI-W59M-Q746-X3C2
Bulletin has no description...
MINI-385P-GG2V-3GWG
Bulletin has no description...
MINI-868J-77H2-W22R
Bulletin has no description...
EUVD-2026-41128
Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...
CVE-2026-58457
Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...
ExploitKnowdledgebase
poc2detect Defense-first pipeline that discovers GitHub proof...