MINI-JRCW-HG82-XG9X

Bulletin has no description...

CVE-2026-1784

creationtimestamp| type| source ---|---|--- 2026-06-02 09:58:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncdgtintd2j 2026-06-04 10:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnheii7v7r2n 2026-07-03 00:05:26+00:00| seen|...

CVE-2025-5085

creationtimestamp| type| source ---|---|--- 2026-06-02 09:07:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mncahxfd6b2w 2026-06-03 07:15:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mneksk7tcn2t...

CVE-2026-10510

creationtimestamp| type| source ---|---|--- 2026-06-02 03:01:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116678277579231176...

CVE-2026-24753

creationtimestamp| type| source ---|---|--- 2026-06-02 00:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnber3hl3l2w...

EUVD-2018-21956

ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages...

OpenTelemetry eBPF Instrumentation security vulnerabilities

OpenTelemetry eBPF Instrumentation is an open-source, eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the export of raw Redis erro...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : PHP vulnerabilities (USN-8336-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8336-1 advisory. Aleksey Solovev and Nikita Sveshnikov discovered that PHP improperly handled NUL bytes when preparing SQL queries in the...

CVE-2026-9319

creationtimestamp| type| source ---|---|--- 2026-06-01 19:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatk6z5aa2k 2026-06-12 12:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27 2026-06-16 19:25:04+00:00| seen|...

CVE-2026-0072

creationtimestamp| type| source ---|---|--- 2026-06-01 19:26:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116676491126128421 2026-07-17 22:12:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mqurgci5en2o...

CVE-2026-30963

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

CVE-2026-30963

Capsule (a Kubernetes multi-tenancy framework) relied on a webhook to validate namespace updates, but prior to v0.13.0 it did not intercept namespace/status or namespace/finalize subresource changes. This omission enables a tenant with permission to modify those subresources to hijack other names...

CVE-2026-30963

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

CVE-2026-30963 Capsule Namespace Hijacking via subresource

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

EUVD-2026-33739

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

CVE-2026-30963 Capsule Namespace Hijacking via subresource

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

CVE-2026-30963 Capsule Namespace Hijacking via subresource

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved through update/patch operations on namespaces, Capsule uses a webhook to validate update requests targeting namespaces. However, in Kubernetes, the namespace/finalize and...

CVE-2026-10276 hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery

A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of the file src/index.ts of the component getbuildstatus/getbuildlog/triggerbuild. Such manipulation leads to server-side request forgery. The attack may be performed from remote. T...

CVE-2026-10261

A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/applicationstatus.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used...

CVE-2026-10261 CodeAstro Online Job Portal application_status.php sql injection

A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/applicationstatus.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used...