23710 matches found
CVE-2026-7368 Yarbo Android/iOS Mobile Application and Cloud Infrastructure Missing Authorization
The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user credentials, can subscribe to wildcard topics covering all robots globally, and can publish to any robot's command topic...
EUVD-2026-36433
The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user credentials, can subscribe to wildcard topics covering all robots globally, and can publish to any robot's command topic...
OESA-2026-2619 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may resul...
PT-2026-48886
Name of the Vulnerable Software and Affected Versions Yarbo cloud affected versions not specified Description The cloud service fails to enforce per-device or per-user authorization. A client with valid credentials, including shared hard-coded credentials or legitimate per-user credentials, can...
DEBIAN-CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled and the legacy pythoncomplete.vim for builds with the +python interpreter executes the import and from statements foun...
Security update for hplip
This update for hplip fixes the following issues Update to HPLIP 3.26.4: Security issues: CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. CVE-2026-8631: escalation of privileges and/or arbitrary...
MINI-77M3-X2C2-CX62
Bulletin has no description...
ClipBucket V5 SQL注入漏洞
ClipBucket V5 is a video hosting platform developed by MacWarrior’s individual developers. Versions of ClipBucket V5 prior to 5.5.3 – including version 132 – contained an SQL injection vulnerability. This vulnerability stemmed from the number parameter in the POST /actions/subtitleedit.php reques...
kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()
A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the usbippackretsubmit function by sending a specially crafted RETSUBMIT response. This response, containing an oversized numberofpackets value, could cause a heap out-of-bounds...
MINI-PMHW-C6H3-844P
Bulletin has no description...
CVE-2025-58468
creationtimestamp| type| source ---|---|--- 2026-06-10 05:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvwrgpei72u...
CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15
CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...
MINI-J339-H5PC-595Q
Bulletin has no description...
MINI-8X24-WVCM-PH2W
Bulletin has no description...
MINI-M3X8-6WCJ-78J4
Bulletin has no description...
MINI-F5C3-X3PG-V8RF
Bulletin has no description...
CVE-2026-44755
creationtimestamp| type| source ---|---|--- 2026-06-09 12:30:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z...
CVE-2026-8883
creationtimestamp| type| source ---|---|--- 2026-06-09 07:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnrgmzyq2a 2026-06-10 08:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwbhhbpwf26...
CVE-2026-9185
The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the userId parameter of the sixstoragegetuserinfo and sixstorageupdateprofile AJAX actions. This is due to the sixstoragegetUserInfo and...
