CVE-2026-82936: Allocation of Resources Without Limits or Throttling

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-82929: Use of Hard-coded Cryptographic Key

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

MINI-X75M-5MH4-W382

Bulletin has no description...

MINI-389M-P2R2-25MH

Bulletin has no description...

MINI-3V58-HR53-MH9G

Bulletin has no description...

PT-2026-28591

Name of the Vulnerable Software and Affected Versions Xiongmai DVR/NVR devices versions 4.03.R11 Xiongmai AHB7008T-MH-V2 Xiongmai NBD7024H-P Description A root OS command injection can occur through the use of shell metacharacters in the HostName value. This occurs via an authenticated DVRIP...

CVE-2026-34005: Improper Neutralization of Special Elements used in an OS Command

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

MINI-GPC2-C322-3MH7

Bulletin has no description...

CVE-1999-0358

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...

MINI-VFM2-MH38-M288

Bulletin has no description...

EUVD-2007-2704

Malware in sbrugna...

EUVD-2010-4810

Malware in sbrugna...

EUVD-2010-5026

Malware in sbrugna...

EUVD-2010-4809

Malware in sbrugna...

EUVD-1999-0358

Malware in sbrugna...

EUVD-2010-4812

Malware in sbrugna...

EUVD-2010-4811

Malware in sbrugna...

EUVD-2024-40799

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2008-5152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

Malicious code in mh-swagger-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c511d3eda3b228d180191f4caee04bad5746d8134a082644b776b462f4b2eb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...