MINI-2H8C-QGMR-7HCC

Bulletin has no description...

CVE-2026-72442

creationtimestamp| type| source ---|---|--- 2026-08-17 12:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbqi2vn242e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-74872

creationtimestamp| type| source ---|---|--- 2026-08-17 12:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo44i3ol2b 2026-08-17 18:10:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcce7z3bd2j 2026-08-20 00:03:28+00:00| seen|...

CVE-2026-74889

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

EUVD-2026-60108

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-74889

The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...

CVE-2026-74889

opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

apk-info v1.0.12

apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...

MINI-HF68-PP29-89M2

Bulletin has no description...

MINI-68FV-45R9-GGR4

Bulletin has no description...

MINI-445V-RW3V-5XQV

Bulletin has no description...

BIT-DOTNET-SDK-2026-62902 .NET Information Disclosure Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-76625

openssl encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...

CVE-2026-33437: Improper Neutralization of Input During Web Page Generation

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...

PT-2026-73222

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission control issue exists within the notification service module. Successful exploitation of this flaw may compromise service confidentiality...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099900)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099900 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: fix tcchainfillnode to initialize tcminfo to zero to prevent an info-leak Whe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100325 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: clsapi: fix tcchainfillnode to initialize tcminfo to zero to prevent an info-leak Whe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100134 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces dependin...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099482 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control respon...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099933)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099933 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrmuser: fix info leak in buildreport struct xfrmuserreport is a u8 proto field followed by a...