MINI-63VJ-358J-C55F

Bulletin has no description...

MINI-9H2V-JC78-48PG

Bulletin has no description...

CVE-2026-47230 Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...

CVE-2026-47227

Admidio is an open-source user management solution. modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares...

CVE-2026-47227 Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`

Admidio is an open-source user management solution. modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares...

ECHO-2431-73E5-E8C0

Bulletin has no description...

CGA-4XW5-83FX-46CQ

Bulletin has no description...

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

BELL-CVE-2026-68082

Bulletin has no description...

BELL-CVE-2026-68306

Bulletin has no description...

BELL-CVE-2026-68287

Bulletin has no description...

BELL-CVE-2026-68428

Bulletin has no description...

BELL-CVE-2026-68376

Bulletin has no description...

BELL-CVE-2026-68354

Bulletin has no description...

BELL-CVE-2026-68105

Bulletin has no description...

CVE-2026-13613 KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection...

CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

EUVD-2025-210701

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

CVE-2026-68442

creationtimestamp| type| source ---|---|--- 2026-08-12 01:13:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fuza67qd5imt3 2026-08-12 23:16:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117085082278939225...

EUVD-2026-56980

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...