15834 matches found
MINI-M845-R3MF-MQC5
Bulletin has no description...
MINI-VQMV-F44M-23XC
Bulletin has no description...
MINI-27P7-34MC-MW35
Bulletin has no description...
MINI-RW55-M27M-3GR5
Bulletin has no description...
MINI-HXF2-X8CH-P944
Bulletin has no description...
vuln-agent
vuln-agent AI-powered vulnerability scanner + exploit-researc...
Astra Linux – Vulnerability in Firefox
DOM spoofing issue: Core & HTML components. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...
Astra Linux – Vulnerability in Firefox
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
recon-arc
ReconARC 🔍 Advanced Reconnaissance & Attack-path Ranking Co...
EUVD-2026-53315
Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify $user-hasCompany$model-companyid. NotesController's show, update, and destroy actions authori...
CVE-2026-55739
Crater isolates data per companyid, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and -hasCompany-companyid. CustomerPolicy's view/update/delete methods omit the company-ownership check entirely, checking only the blanket ability. Route-model-bound custome...
MINI-R763-75Q4-C57G
Bulletin has no description...
MINI-H42R-86VR-VR23
Bulletin has no description...
MINI-45X5-FVM5-VC6M
Bulletin has no description...
MINI-3825-MR54-XMFW
Bulletin has no description...
MINI-RWR4-XJ85-V486
Bulletin has no description...
MINI-CGR2-69MF-G734
Bulletin has no description...
CVE-2026-55739
CVE-2026-55739 (Crater) : The vulnerability arises from a missing tenant-ownership check in CustomerPolicy where view/update/delete do not verify company ownership, plus unscoped route-model lookups and bulk deletion (self::find($id)) that ignore company filters. As a result, any authenticated us...