MINI-V883-CV2J-XW4X

Bulletin has no description...

MINI-3MRX-WXR5-86X9

Bulletin has no description...

MINI-5VV8-CFRX-C8CM

Bulletin has no description...

MINI-2PGV-X79R-J57R

Bulletin has no description...

MINI-6RPX-FFM7-MQ9P

Bulletin has no description...

MINI-MW7J-25J7-79G9

Bulletin has no description...

MINI-8XHG-JJ2M-MFC2

Bulletin has no description...

MINI-4HP5-V2J5-P728

Bulletin has no description...

MINI-VGR8-FHR3-8268

Bulletin has no description...

MINI-QW5P-6GC5-VP8X

Bulletin has no description...

MINI-QC22-4XH5-W22G

Bulletin has no description...

MINI-25C9-WP9R-6P8F

Bulletin has no description...

MINI-445V-RW3V-5XQV

Bulletin has no description...

CVE-2026-15623

creationtimestamp| type| source ---|---|--- 2026-08-17 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117109674799093583 2026-08-17 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtb6mhhqql2f 2026-08-17 08:07:15+00:00| seen|...

CVE-2026-19996

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...

CVE-2026-19996

CVE-2026-19996 affects Webkul Bagisto (up to 2.4.4). The vulnerability resides in the Backend Customer Behavior Data Endpoint, specifically the /admin/customers area, where manipulation of the ID argument leads to improper privilege management. It can be exploited remotely; a public exploit exist...

curl: curl: Insecure connection establishment due to TLS configuration mismatch

A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security TLS configuration of the new transfer does not match the existing connection,...

CVE-2026-14832

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...

CVE-2026-13700

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the...

CVE-2026-14832

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthenticated users, allowing anyone who knows a customer's phone number to retrieve that customer's loyalty profile, including name,...