490151 matches found
MINI-7Q3R-8R3F-PR62
Bulletin has no description...
MINI-6Q6P-J2CJ-6Q3G
Bulletin has no description...
MINI-PGCW-HHQ9-RV27
Bulletin has no description...
MINI-CCR2-3Q9X-7FQC
Bulletin has no description...
MINI-63MG-248V-JHW8
Bulletin has no description...
MINI-MWMR-P89C-59MC
Bulletin has no description...
MINI-JWJ8-WC6F-68VM
Bulletin has no description...
MINI-445V-RW3V-5XQV
Bulletin has no description...
BIT-PROXYSQL-2026-48774 ProxySQL MCP run_sql_readonly executes side-effecting MySQL multi-statements despite read-only contract
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP runsqlreadonly tool violates its documented read-only contract for MySQL targets. The tool validates only the full input string with a substring blacklist and first-keyword...
BIT-GHOST-2026-70590 Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification...
EUVD-2026-60042
A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...
CVE-2026-19975
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...
EUVD-2026-60035
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...
CVE-2026-19975
CVE-2026-19975 affects Azuriom CMS up to version 1.2.12. The vulnerability targets the Money Transfer Handler, specifically the function transferMoney in app/Http/Controllers/ProfileController.php, enabling time-of-check time-of-use (TOCTOU) manipulation. The issue is exploitable remotely with a ...
MINI-CF4J-8W7X-699V
Bulletin has no description...
MINI-MH24-MMX6-X992
Bulletin has no description...
MINI-MF6M-RF65-Q9Q6
Bulletin has no description...
MINI-XR7C-Q248-FVH4
Bulletin has no description...