72636 matches found
MINI-V55G-2RF5-RJVV
Bulletin has no description...
MINI-5Q59-9V2C-J79H
Bulletin has no description...
EUVD-2026-70532
MISP contains a session fixation vulnerability in the CustomAuth authentication a custom configuration flow. When a user was successfully authenticated through CustomAuth, MISP stored the authenticated user identity in the existing session without first rotating the session identifier. As a resul...
MINI-38W3-GVM4-F4RX
Bulletin has no description...
GHSA-4Q39-2JHR-7QX8
creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...
MINI-FHX7-W4PG-Q695
Bulletin has no description...
MINI-X73V-4FGG-7GR9
Bulletin has no description...
MINI-P85J-JCM9-J5X5
Bulletin has no description...
CVE-2026-36374
Description A public endpoint has been identified that allows certificate lookup using a predictable identifier certificate code, without any authentication or authorization mechanism. By enumerating this identifier, an attacker can access third-party personal data, including full name, CPF...
CGA-MQQ4-FQW4-4WQC
Bulletin has no description...
MINI-HPCC-7GRH-J32X
Bulletin has no description...
MINI-396R-XM56-4JMX
Bulletin has no description...
MINI-56F2-GF53-C692
Bulletin has no description...
EUVD-2026-70063
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
CVE-2026-84702
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
EUVD-2026-69793
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702
facefusion through 3.6.1 is vulnerable to a path traversal flaw in the get_job_file_name function (located in facefusion/jobs/job_manager.py), which fails to normalize job identifiers. An attacker can supply traversal sequences in the job identifier parameter via the unauthenticated HTTP API to w...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...