SUSE CVE-2026-44523

Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWTSECRET configuration value. The application accepts any base64-decodable secret regardless of size, including secrets as short as 1 byte. This vulnerability is fixed in 0.19.4...

CVE-2026-5219

Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49...

MINI-PCRP-FMQ4-WCC4

Bulletin has no description...

CVE-2025-71387

creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601 2026-08-30 13:33:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o...

DEBIAN-CVE-2026-17775

Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI

The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....

MINI-X5JH-M69C-86WC

Bulletin has no description...

MINI-CW43-M94F-QPCC

Bulletin has no description...

MINI-X9XR-398W-CJP9

Bulletin has no description...

MINI-JM2Q-RXWJ-MJPX

Bulletin has no description...

MINI-P684-WHFF-JG7V

Bulletin has no description...

MINI-4W94-RMX5-VGXH

Bulletin has no description...

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

CVE-2026-17496 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...

CVE-2026-17496 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...

PT-2026-64811

Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0 Description Cross-site scripting occurs when AI chat responses are rendered using markdown-it with the html:true configuration and injected into the DOM via dangerouslySetInnerHTML in the chat-preview component...

MINI-QQHP-FW37-7CRP

Bulletin has no description...

ECHO-E22F-3A38-1187

Bulletin has no description...

MINI-X7H4-J322-3GQ4

Bulletin has no description...

PT-2026-64353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur during the removal of a shared GPIO proxy's parent. This issue stems from an excessively wide critical section using a mutex embedded in the gpio shared entry...