25015 matches found
MINI-QPC7-9W62-8459
Bulletin has no description...
MINI-RV8F-HJMX-58M5
Bulletin has no description...
MINI-457C-JFF3-29R4
Bulletin has no description...
MINI-264F-2X6M-P57W
Bulletin has no description...
CVE-2026-65501
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
PYSEC-2026-3538 Prompty: Arbitrary file read via file reference expansion
Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...
CVE-2025-13146
creationtimestamp| type| source ---|---|--- 2026-07-23 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrcqv2rsnl2o...
CVE-2026-65501
CVE-2026-65501 affects the WordPress plugin Shiptastic for WooCommerce (versions
CVE-2026-65463
CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...
CVE-2026-61946
WordPress Easy Appointments plugin
kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs
A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. This vulnerability occurs when skbgroreceive attempts to merge zerocopy socket buffers skbs without properly managing page reference counts, specifically when the SKBFLMANAGEDFRAGREFS flag is set. An attacker...
ECHO-A6ED-1CEA-98BC
Bulletin has no description...
RockyLinux 9 : kernel (RLSA-2026:43307)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:43307 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...
The vulnerability of the qcom_cpufreq_krait_name_version() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a frequency scaling driver for the Linux kernel, allows a hacker to cause a system failure.
The vulnerability of the qcomcpufreqkraitnameversion function in the drivers/cpufreq/qcom-cpufreq-nvmem.c frequency scaling driver for Linux operating systems is related to the absence of references to an active, allocated resource. Exploiting this vulnerability could allow an attacker to trigger...
PT-2026-63922
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
kernel security update
6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Allocation of Resources Without Limits or Throttling
Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the areAllActionIdsValid validation in server action form submission handling. An attacker can exhaust CPU and block other requests in the same...
Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Details Using an element inside a data-URI...
