MINI-7GWR-J5MQ-MQJ9

Bulletin has no description...

MINI-33XG-X8H5-GRFW

Bulletin has no description...

MINI-H8F9-QW7M-397W

Bulletin has no description...

MINI-6MQF-3XQ3-6VW2

Bulletin has no description...

MINI-XC6H-MH7J-326P

Bulletin has no description...

MINI-XJG3-GRFF-JVV6

Bulletin has no description...

MINI-2HJJ-48R3-J2H4

Bulletin has no description...

MINI-F759-F943-R6R8

Bulletin has no description...

MINI-MR6Q-G66R-8VH5

Bulletin has no description...

MINI-C4H3-V36J-448F

Bulletin has no description...

MINI-M356-VHWJ-3663

Bulletin has no description...

MINI-R75P-55VF-8FXG

Bulletin has no description...

MINI-QMRW-6RWV-MVJ5

Bulletin has no description...

MINI-WMHH-F6H3-V373

Bulletin has no description...

MINI-FW5V-PRGF-76FH

Bulletin has no description...

SUSE CVE-2026-6873

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation concatenating the cookie name and salt argument, which allows a remote attacker to use a cookie in a context different from the one wher...

SUSE CVE-2026-46256

In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into NFS via nfswritepages LOCALIO is an NFS loopback mount optimization that avoids using the network for READ, WRITE and COMMIT if the NFS client and server are determined to be on...

Reused Component Instances Retain Stale Render Context

Summary ViewComponent::Base instances retain multiple render-scoped objects across calls to renderin. If the same component, collection, or spacer component instance is reused across requests, users, tenants, or threads, later renders can use stale helpers, controller, request, viewflow,...

CVE-2026-10221

A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function compresscontext of the file runagent.py. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be use...

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

Summary The HTTP handler /log in lib/server.js lines 491–515 of browserstack-runner passes unauthenticated user-supplied data to vm.runInNewContext combined with eval, enabling a sandbox escape and arbitrary code execution on the host system. Details When browserstack-runner starts, it creates an...