MINI-MQPQ-837W-4GG9

Bulletin has no description...

MINI-CQHC-G5J3-H3JQ

Bulletin has no description...

MINI-M994-CMGX-46F5

Bulletin has no description...

MINI-JGFG-Q5MJ-V463

Bulletin has no description...

kernel: bnxt_en: Fix RSS context delete logic

A flaw was found in the bnxten driver of the Linux kernel. An issue in the RSS Receive Side Scaling context deletion logic can lead to a leak of VNICs Virtual Network Interface Controllers in the firmware. This can cause subsequent attempts to create new VNICs to fail, resulting in the loss of...

RHEL 8 : libxml2 (RHSA-2026:27736)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:27736 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: buffer over-read in...

CVE MCP Server 0.2.0

CVE MCP Server is a production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds...

Adobe DNG Software Development Kit (SDK) heap buffer overflow vulnerability (CNVD-2026-26864)

The Adobe DNG Software Development Kit SDK is a software development toolkit launched by Adobe Inc. The Adobe DNG Software Development Kit SDK contains a heap buffer overflow vulnerability, allowing attackers to execute arbitrary code within the context of the current user...

CVE-2026-56306: Improper Input Validation

Capgo before 12.128.2 contains a weak parsing vulnerability in the x-limited-key-id header that allows attackers to bypass subkey enforcement by submitting malformed values, zero, or duplicate headers that result in NaN or falsy values. Remote attackers can manipulate the x-limited-key-id header ...

podman -- files outside build context may be included via malicious Git repo or tar archive

The Podman developers report: Building a Dockerfile using an ADD or COPY instruction accessing a malicious Git repository or tar archive could cause files outside the build context directory to be included in the build context or copied into the build...

MINI-82GP-RR77-X44F

Bulletin has no description...

MINI-PRJQ-27J5-QGVW

Bulletin has no description...

MINI-CVQ9-4J7R-Q6Q9

Bulletin has no description...

github-trending-xss-vulnerability-scanner

XSS Vulnerability Scanner Plugin Comprehensive cross-site scr...

Linux Distros Unpatched Vulnerability : CVE-2026-49295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in...

MINI-9QJ8-P3G6-RH9F

Bulletin has no description...

MINI-M2G2-54P6-27MP

Bulletin has no description...

MINI-WGGG-JRPQ-HQJ3

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-48928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release line...

Cross-site Scripting (XSS)

Overview @sveltia/cms is a Sveltia CMS is a modern, lightweight, Git-based headless content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Markdown/RichText preview rendering process. An attacker can execute arbitrary JavaScript in the conte...