22192 matches found
MINI-PMM5-64VQ-HJ6W
Bulletin has no description...
MINI-VQVV-M4X7-RPRM
Bulletin has no description...
MINI-R5HH-P3WQ-G23Q
Bulletin has no description...
GHSA-7FXV-8WR2-MFC4 Local Path Provisioner Vulnerable to HelperPod Template Injection
Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...
SUSE CVE-2026-43306
In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIGCFI enabled, the kernel strictly enforces that indirect function calls use a function pointer type that matches the target function. I ran into the following type...
MINI-RWCP-H3MX-44XH
Bulletin has no description...
MINI-64CX-G2CR-3HGW
Bulletin has no description...
EUVD-2026-28639
PraisonAI MCP tools/call path-traversal = RCE via Python .pth injection...
MINI-55HP-76VX-P3VG
Bulletin has no description...
MINI-MV8V-H7FH-CHF8
Bulletin has no description...
MINI-3H6H-XR68-G39C
Bulletin has no description...
MINI-8WJ9-PC6C-9R74
Bulletin has no description...
CVE-2025-9973
Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...
MINI-Q23G-86M4-JFJC
Bulletin has no description...
CVE-2025-9973
CVE-2025-9973 affects WS O2 Identity Server: failure to validate the organization context during adaptive authentication allows triggering authentication logic in other organizations/sub-organizations. This enables cross-organization authorization bypass, potentially leading to privilege escalati...
CVE-2025-9973 Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover
Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...
CVE-2025-9973
Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...
MINI-XJX4-P7M2-JPHG
Bulletin has no description...