MINI-HXV2-5PJJ-4G44

Bulletin has no description...

MINI-729G-CQ3R-6XHP

Bulletin has no description...

MINI-64G9-5942-XM7H

Bulletin has no description...

MINI-9V85-295X-R477

Bulletin has no description...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🐍 SNAKEBITE v2.0 ⚡ The Ultimate Automated Web Security Sc...

MINI-M4R2-C746-5V59

Bulletin has no description...

MINI-M243-P84W-24VV

Bulletin has no description...

MINI-C36V-67HV-27RR

Bulletin has no description...

MINI-RHW8-46C5-352F

Bulletin has no description...

MINI-V3F5-64VG-HC27

Bulletin has no description...

MINI-P2QC-M727-MF8P

Bulletin has no description...

MINI-X8R2-6R2H-VHF9

Bulletin has no description...

MINI-734F-WM6G-M64F

Bulletin has no description...

model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files

Keras 3.x introduced a fix for CVE-2025-9905 by checking dataset.external in H5IOStore.verifydataset. This check blocks datasets whose raw bytes are stored in external files via the HDF5 "External Data Storage" mechanism. However, HDF5 supports a second, unrelated external-reference mechanism:...

MINI-XR73-3MX8-FH2W

Bulletin has no description...

MINI-RP5V-5G28-523J

Bulletin has no description...

PT-2026-25306

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM-Based XSS.This issue affects Master Addons for Elementor: from n/a through = 2.1.3...

PT-2026-25265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fernando Briano List category posts list-category-posts allows DOM-Based XSS.This issue affects List category posts: from n/a through = 0.93.1...

PT-2026-25298

CVE-2026-32454 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Avada Core https://t.co/axBxa96sWp...

CVE-2026-26794

GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the addgroup function. This vulnerability allows attackers to execute arbitrary SQL database operations via a crafted HTTP request...