490117 matches found
MINI-3MC4-WMH9-HVCV
Bulletin has no description...
MINI-2J27-2855-296X
Bulletin has no description...
MINI-JQ6R-5X96-556M
Bulletin has no description...
MINI-7FW9-J4FQ-57R8
Bulletin has no description...
MINI-XP56-JWQ8-F8VV
Bulletin has no description...
MINI-G673-CJCV-2G28
Bulletin has no description...
MINI-QPPG-6CMM-5Q74
Bulletin has no description...
MINI-MCM8-6H8H-8V5M
Bulletin has no description...
MINI-2JQ4-8QWV-XFJV
Bulletin has no description...
MINI-85JC-VPJR-4RWF
Bulletin has no description...
MINI-2QGP-7V3G-CPVM
Bulletin has no description...
MINI-6MVH-XHH9-J46M
Bulletin has no description...
MINI-CFW7-PWQ4-8J3J
Bulletin has no description...
MINI-WGPV-MH2G-XM85
Bulletin has no description...
EUVD-2026-62496
Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory 6.2.3 - companyName from the request was written unescaped into an XML attribute...
EUVD-2026-62490
Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords and allow-lists the sort clause...
EUVD-2026-62488
Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows...
CVE-2026-45272 MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File
MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...
CVE-2026-45274 MyBooks: Unauthenticated Registration Bypass via Missing Server-Side ALLOW_REGISTER Enforcement
MyBooks is anebook management web server also known as Talebook. In 3.41.2 and earlier, the SignUp.post handler for POST /api/user/signup in webserver/handlers/user.py does not enforce the ALLOWREGISTER configuration flag, even though the frontend hides registration controls when the flag is fals...