MINI-88JR-X2W7-P3M5

Bulletin has no description...

CVE-2026-6953

creationtimestamp| type| source ---|---|--- 2026-06-30 10:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpiqtmajhg2m...

EDB-28713

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/929c0d80-34e5-4a6d-9986-b1e2d37eaa30...

MINI-F56M-6PF7-HJ95

Bulletin has no description...

MINI-RJQW-C7VM-R2GQ

Bulletin has no description...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpfprogattach function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to trigger a servic...

Apple Safari resource management error vulnerability (CNVD-2026-28252)

Apple Safari is a web browser developed by Apple Inc., primarily used for browsing web content. Apple Safari has a resource management vulnerability. This vulnerability stems from improper memory management during the processing of web content, leading to memory-related errors and references...

Apple Safari resource management error vulnerability (CNVD-2026-28246)

Apple Safari is a web browser developed by Apple Inc., primarily providing features for web browsing, content rendering, and network functions integrated with the operating system. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper memory manageme...

Google Android Authorization Vulnerability (CNVD-2026-26201)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to cause local information leaks...

FreeBSD-SA-26:38.jail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:38.jail Security Advisory The FreeBSD Project Topic: Jail reference count underflow Category: core Module: jail Announced: 2026-06-30 Credits: Yuxiang Yang,...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50353)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50353 advisory. 5.4.17-2136.356.4.3 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639989 CVE-2026-52943 Credit Statement: The...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50351)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50351 advisory. 6.12.0-203.76.7.6 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639984 CVE-2026-52943 Credit Statement: The...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50352)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50352 advisory. 5.15.0-321.202.5.3 - net: skbuff: fix missing zerocopy reference in pskbcarve helpers Minh Nguyen Orabug: 39639981 CVE-2026-52943 Credit Statement: The...

FreeBSD -- Jail reference count underflow

Problem Description: When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. Impact: An...

CVE-2026-50734

creationtimestamp| type| source ---|---|--- 2026-06-29 21:23:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgcet34j2s 2026-07-03 10:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfd3inka2b...

CVE-2026-13008

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-57700. Reason: This candidate is a reservation duplicate of CVE-2026-57700. Notes: All CVE users should reference CVE-2026-57700 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2026-56780

Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/pk/password/ endpoint that allows domain administrators to change any user's password. Attackers with domain admin privileges can bypass object-level access controls to reset superadmin...

CVE-2026-11720 Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the...

CVE-2026-57943 LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing ownership validation. Attackers can manipulate sharedto relations without prop...

CVE-2026-57943 LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing ownership validation. Attackers can manipulate sharedto relations without prop...