MINI-X4MX-54W4-V673

Bulletin has no description...

CVE-2026-72795

SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without...

PT-2026-71237

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An issue exists where the software fails to filter embedded block content based on publish access permissions. While the initial requested block is checked for authorization, blocks pulled in via embe...

MINI-R5F5-R5XR-R53Q

Bulletin has no description...

MINI-FCG6-RCC8-28V2

Bulletin has no description...

CVE-2026-72925 SWC HTML minifier may allow script element breakout when minifying embedded JSON

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swchtmlminifier 59.0.0, the minifyJson processing in crates/swchtmlminifier/src/lib.rs parsed and serialized attacker-controlled JSON in application/json and application/ld+json script...

CVE-2026-72925 SWC HTML minifier may allow script element breakout when minifying embedded JSON

SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swchtmlminifier 59.0.0, the minifyJson processing in crates/swchtmlminifier/src/lib.rs parsed and serialized attacker-controlled JSON in application/json and application/ld+json script...

CVE-2025-0041: Uncontrolled Search Path Element

Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...

CVE-2026-12984

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026...

CVE-2026-12984

CVE-2026-12984 concerns Zyxel Networks WAH7601 (affected through 20072026). The vulnerability is described as Insufficiently Protected Credentials that allows retrieval of embedded sensitive data. Connected documents confirm the affected product and the core impact, but do not provide detailed ro...

CVE-2026-72728: Improper Input Validation

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed URLs that bypassed the Onebox allowlist and embedded malicious content in a site. This issue is fixed in versions 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1...

CVE-2026-12984: Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026...

The vulnerability of the Camera Driver software’s microprogramming system in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to the writing beyond the buffer boundaries when processing parameters such as the input batch size and the number of buffer planes. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the Camera Driver software’s microprogramming in Qualcomm embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...

MeshCore room-server-v1.17.0

About MeshCore MeshCore is a lightweight, portable C++ library that enables multi-hop packet routing for embedded projects using LoRa and other packet radios. It is designed for developers who want to create resilient, decentralized communication networks that work without the internet. 🔍 What is...

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2026-3101)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in...

K000162838: PHP vulnerability CVE-2026-6104

Security Advisory Description In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mbconvertencoding or related mbstring functions, the code incorrectly assumes that when strncasecmp returns 0 it means the strings have the sa...

CVE-2026-15570 Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...

OESA-2026-3283 lmdb security update

Symas LMDB is an extraordinarily fast, memory-efficient database we developed for the OpenLDAP Project. With memory-mapped files, it has the read performance of a pure in-memory database while retaining the persistence of standard disk-based databases. Security Fixes: OpenLDAP Lightning...

[SECURITY] Fedora 43 Update: php-8.4.24-1.fc43

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...