MINI-RG7C-FX46-Q3XP

Bulletin has no description...

MINI-J33C-C77W-J95Q

Bulletin has no description...

MINI-835Q-9CV3-99H3

Bulletin has no description...

CVE-2025-8325

creationtimestamp| type| source ---|---|--- 2026-05-11 10:42:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll3n2jvlm2e...

MINI-X345-7QV6-8PJ3

Bulletin has no description...

MINI-6CQH-393G-CHPF

Bulletin has no description...

CVE-2026-6956

ATutor is vulnerable to a Reflected XSS in the /install/install.php endpoint. An attacker can supply a crafted URL that, when opened, causes arbitrary JavaScript execution in the victim’s browser. The issue has been tested only on version 2.2.4; other versions were not tested but might also be vu...

MINI-C429-52VQ-RC82

Bulletin has no description...

CLSA-2026-1778490923 httpd: Fix of 9 CVEs

CVE-2026-33857: fix length checks in AJP msgget functions - CVE-2026-34032: fix ajpmsggetstring buffer checks - CVE-2026-34059: fix ajpparsedata message len check - CVE-2026-24072: use APEXPRFLAGRESTRICTED in htaccess - CVE-2026-29169: moddavlock: use the right davlockdiscovery - CVE-2026-33006:...

MINI-6683-6HXH-QMR6

Bulletin has no description...

MINI-56QX-47W7-4HMP

Bulletin has no description...

CVE-2026-8258

A flaw has been found in Squirrel up to 3.2. Impacted is the function validateformat in the library sqstdlib/sqstdstring.cpp. Executing a manipulation can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used. The project was...

PT-2026-39641

In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...

CVE-2026-33357: Missing Authorization

In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...

PT-2026-39623

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.15 Description An authorization issue in server mode affects the Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fail to filter user-owned objects by the...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Postfix vulnerability (USN-8253-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8253-1 advisory. Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use...

MINI-PJ4H-3669-W8GV

Bulletin has no description...

MINI-44WH-JV3V-7CHP

Bulletin has no description...

CVE-2026-41018

creationtimestamp| type| source ---|---|--- 2026-05-10 20:26:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mljlsigkot22 2026-05-11 10:41:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll3jovpgn2r...

EUVD-2022-55985

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via...