MINI-CQ42-P48M-29G6

Bulletin has no description...

MINI-95V3-5P4R-FM33

Bulletin has no description...

MINI-877W-4VMP-HCM8

Bulletin has no description...

MINI-R4HP-366R-7VJ3

Bulletin has no description...

MINI-Q937-94HW-5M9C

Bulletin has no description...

MINI-M446-95H5-865C

Bulletin has no description...

MINI-CC36-6CW4-X654

Bulletin has no description...

MINI-C9PX-H35V-8P6F

Bulletin has no description...

MINI-62HX-539P-PJCM

Bulletin has no description...

MINI-W54V-RPM7-Q8FH

Bulletin has no description...

MINI-W48R-CPQW-9RP3

Bulletin has no description...

MINI-M7WR-4RG6-82X2

Bulletin has no description...

MINI-J785-PPC2-6XHG

Bulletin has no description...

MINI-C7F7-RMRX-25XX

Bulletin has no description...

MINI-39CM-378M-RV95

Bulletin has no description...

Cross-site Scripting (XSS)

Overview @cosmos.gl/graph is a GPU-based force graph layout and rendering Affected versions of this package are vulnerable to Cross-site Scripting XSS due to writing a user-controllable HTML string directly to the DOM without sanitization. An attacker can execute arbitrary JavaScript code in a...

EUVD-2025-37372

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

UBUNTU-CVE-2025-57108

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

CVE-2025-64362 WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

When APIs Become Attack Paths: What the Q3 2025 ThreatStats Report Tells Us

Wallarm’s latest Q3 2025 API ThreatStats report link placeholder reveals that API vulnerabilities, exploits, and breaches are not just increasing; they’re evolving. Malicious actors are shifting from code-level weaknesses to business logic flaws, from web apps to partner integrations, and from RE...