MINI-CV9C-829H-QVM6

Bulletin has no description...

ECHO-5FCF-3821-6358

Bulletin has no description...

ECHO-7B55-CAF2-9539

Bulletin has no description...

CGA-432F-7MJ6-GPQF

Bulletin has no description...

CGA-6MMJ-5XC7-26C2

Bulletin has no description...

CVE-2026-28683

creationtimestamp| type| source ---|---|--- 2026-03-06 06:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeosgmxfl2u 2026-03-06 08:06:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu6hj3tj26 2026-03-06 08:07:30+00:00| seen|...

CVE-2026-25962

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip...

EUVD-2026-9967

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip...

MINI-5W8R-CVXQ-QXRX

Bulletin has no description...

MINI-Q4J6-G76R-2P7V

Bulletin has no description...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2026:0777-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0777-1 advisory. Update to version 3.0.5 jscSLE-23879. Security issues fixed: - CVE-2025-11065:...

NewStart CGSL MAIN 6.06 (SP) : ncurses Multiple Vulnerabilities (NS-SA-2026-0020)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has ncurses packages installed that are affected by multiple vulnerabilities: - In ncurses 6.0, there is a format string vulnerability in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

OliveTin has crash on NPE by calling APIs with invalid bindings or log references

Summary An unauthenticated attacker can trigger server-side panics by first creating an execution log entry with a nil binding via StartActionByGet invalid action ID, then calling KillAction or RestartAction on that tracking ID. This causes a nil-pointer dereference in API handlers and results in...

CVE-2026-28782

Craft is a content management system CMS. Prior to 5.9.0-beta.1 and 4.17.0-beta.1, the "Duplicate" entry action does not properly verify if the user has permission to perform this action on the specific target elements. Even with only "View Entries" permission where the "Duplicate" action is...

CVE-2026-26999 Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...

MINI-6XF7-688G-2PW3

Bulletin has no description...

MINI-VVM5-JVJM-RPF2

Bulletin has no description...

MINI-RMMR-FR5H-HF2R

Bulletin has no description...

MINI-HPP3-9CCV-FF4X

Bulletin has no description...

Vulnerabilities fixed in Cisco Secure Firewall systems

Cisco has fixed several vulnerabilities in Cisco Secure Firewall including ASA and FTD software. The vulnerabilities include SQL injection, privilege escalation, denial-of-service, cross-site scripting, and improper management of entries in various Cisco Secure Firewall components. Authenticated...