MINI-85QG-87VR-HC95

Bulletin has no description...

MINI-XJG4-8QW6-2QWQ

Bulletin has no description...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

MINI-6769-2CP8-6X43

Bulletin has no description...

MINI-C25R-PWHH-8P4H

Bulletin has no description...

MINI-3HC7-XRGG-3P2R

Bulletin has no description...

GHSA-FR49-MHGJ-CRFC

creationtimestamp| type| source ---|---|--- 2026-06-04 15:20:57+00:00| seen| https://gist.github.com/alon710/010787d34dde83f4031b6f6c155ccffb...

CVE-2026-10840

creationtimestamp| type| source ---|---|--- 2026-06-04 14:21:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116692281779225455 2026-07-25 23:56:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2yw5jzz2c...

MINI-J642-6V3G-WQWH

Bulletin has no description...

RUSTSEC-2026-0162 `pqcrypto-traits` is unmaintained: upstream PQClean project being archived

This crate provides shared trait definitions for the pqcrypto- ecosystem, which wraps C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604. As a result, this crate and the broader pqcrypto- ecosystem will no longer receive updates. Use...

CVE-2026-3820

creationtimestamp| type| source ---|---|--- 2026-06-04 11:51:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnhkpjttbm2f...

CVE-2026-50208

creationtimestamp| type| source ---|---|--- 2026-06-04 10:46:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhh2l5poa2b...

MINI-HV5M-R559-H4JH

Bulletin has no description...

MINI-P2XQ-XRCF-5G5F

Bulletin has no description...

CVE-2026-2652

creationtimestamp| type| source ---|---|--- 2026-06-04 09:46:33+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2652.yaml 2026-08-08 10:06:36+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-08-07 2026-08-08...

SUSE CVE-2026-45679

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate...

JetBrains TeamCity < 2025.11.5 / 2026.x < 2026.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.5, or prior to 2026.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access CVE-2026-44413 - In...

CVE-2026-2596

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-F9RX-7WF7-JR36

creationtimestamp| type| source ---|---|--- 2026-06-03 22:11:20+00:00| seen| https://gist.github.com/alon710/067712fc0b9798c132c204b55ab42a44...

USN-8253-2: Postfix vulnerability

USN-8253-1 fixed a vulnerability in Postfix. This update provides the corresponding fix for Postfix on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes....