MINI-FV7X-HWF3-W93G

Bulletin has no description...

MINI-6RRP-65MC-GF26

Bulletin has no description...

MINI-FQVM-3WHV-PVMW

Bulletin has no description...

MINI-486Q-C5C7-P7RH

Bulletin has no description...

MINI-VFRJ-R9W8-43QW

Bulletin has no description...

MINI-QX59-63Q9-XMM2

Bulletin has no description...

MINI-3C85-HV46-C5G6

Bulletin has no description...

MINI-P338-JCXJ-XM9C

Bulletin has no description...

MINI-8FVP-8GC8-GQ83

Bulletin has no description...

MINI-67WR-P5XW-7349

Bulletin has no description...

MINI-RQXP-WWXH-CJFQ

Bulletin has no description...

CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...

PT-2026-76680

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in the publicly-served Q&A QAPage JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engi...

CVE-2026-50776

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

PT-2026-76829

This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who is an Org Admin of a single organization can call GET...

PT-2026-73274

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

PT-2026-73181

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...

PT-2026-76837

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state...

PT-2026-76706

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

PT-2026-76686

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap passes attacker-controlled sourceMappingURL values to joindirnameopts.from, annotation, and loadFile permits traversed ...