24906 matches found
MINI-2RQ6-FPRH-HM8P
Bulletin has no description...
EUVD-2026-29103
In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...
EUVD-2026-29081
Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects without filtering by the requesting user's identity. An authenticated user could access another user's...
CVE-2026-7815
creationtimestamp| type| source ---|---|--- 2026-05-11 16:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqoykwir2z 2026-05-26 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrd4azuq726...
CVE-2026-33357
In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...
CVE-2026-33357 Meari OpenAPI device status IDOR
In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...
CVE-2026-33357
CVE-2026-33357 affects Meari client applications that embed com.meari.sdk, including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label
CVE-2026-33357 Meari OpenAPI device status IDOR
In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...
CVE-2026-44774
creationtimestamp| type| source ---|---|--- 2026-05-11 15:10:49+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-96qj-4jj5-wcjc 2026-05-12 23:15:01+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3mlow66ezsf2e...
SUSE CVE-2026-6735
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...
MINI-J25M-2MJ4-8X2R
Bulletin has no description...
MINI-4C2P-P7CC-XH4X
Bulletin has no description...
MINI-RG7C-FX46-Q3XP
Bulletin has no description...
MINI-J33C-C77W-J95Q
Bulletin has no description...
MINI-835Q-9CV3-99H3
Bulletin has no description...
CVE-2025-8325
creationtimestamp| type| source ---|---|--- 2026-05-11 10:42:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mll3n2jvlm2e...
MINI-X345-7QV6-8PJ3
Bulletin has no description...
MINI-6CQH-393G-CHPF
Bulletin has no description...
CVE-2026-6956
ATutor is vulnerable to a Reflected XSS in the /install/install.php endpoint. An attacker can supply a crafted URL that, when opened, causes arbitrary JavaScript execution in the victim’s browser. The issue has been tested only on version 2.2.4; other versions were not tested but might also be vu...