16820 matches found
MINI-33XG-X8H5-GRFW
Bulletin has no description...
MINI-H8F9-QW7M-397W
Bulletin has no description...
MINI-6MQF-3XQ3-6VW2
Bulletin has no description...
MINI-XC6H-MH7J-326P
Bulletin has no description...
MINI-XJG3-GRFF-JVV6
Bulletin has no description...
MINI-2HJJ-48R3-J2H4
Bulletin has no description...
MINI-MR6Q-G66R-8VH5
Bulletin has no description...
MINI-F759-F943-R6R8
Bulletin has no description...
MINI-C4H3-V36J-448F
Bulletin has no description...
MINI-M356-VHWJ-3663
Bulletin has no description...
MINI-R75P-55VF-8FXG
Bulletin has no description...
MINI-QMRW-6RWV-MVJ5
Bulletin has no description...
MINI-WMHH-F6H3-V373
Bulletin has no description...
MINI-FW5V-PRGF-76FH
Bulletin has no description...
SUSE CVE-2026-6873
An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation concatenating the cookie name and salt argument, which allows a remote attacker to use a cookie in a context different from the one wher...
SUSE CVE-2026-46256
In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into NFS via nfswritepages LOCALIO is an NFS loopback mount optimization that avoids using the network for READ, WRITE and COMMIT if the NFS client and server are determined to be on...
CVE-2026-10221
A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function compresscontext of the file runagent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be use...
browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
Summary The HTTP handler /log in lib/server.js lines 491–515 of browserstack-runner passes unauthenticated user-supplied data to vm.runInNewContext combined with eval, enabling a sandbox escape and arbitrary code execution on the host system. Details When browserstack-runner starts, it creates an...
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the getsignedcookie function. An attacker can access data intended for a different context by crafting distinct name, salt pairs that result in the same concatenated value. Remediation...