72257 matches found
CVE-2026-62379
creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-07-31 13:41:33+00:00| seen|...
CVE-2026-65708
creationtimestamp| type| source ---|---|--- 2026-07-24 19:44:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrg4gq3cvv2y 2026-07-24 20:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fgt7wu2d...
ECHO-2909-5985-DDB1
Bulletin has no description...
ECHO-D8AF-6409-ADC1
Bulletin has no description...
ECHO-779F-7C8E-76E9
Bulletin has no description...
ECHO-4EE7-A5EC-F557
Bulletin has no description...
GHSA-74H3-CXQ7-VC5Q Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Summary An authenticated low-privilege user can execute arbitrary code-interpreter Python and tools inside another user's authenticated session. The Socket.IO event-caller geteventcall delivers execute:python / execute:tool events to a client-supplied sessionid after only checking that the sessio...
DEBIAN-CVE-2026-64229
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
EUVD-2026-48637
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
CVE-2026-55731
Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...
CVE-2026-66006 lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...
CVE-2026-55731
Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...
EUVD-2026-48596
Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...
CVE-2026-55731 Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...
MINI-36GQ-X7F5-8CWF
Bulletin has no description...
MINI-HG8R-45JG-WC8Q
Bulletin has no description...
MINI-QGPF-MXCQ-6MJ3
Bulletin has no description...
MINI-4V2J-7R2P-9V78
Bulletin has no description...