permanet

Permanet Archivo web verificable criptográficamente. Envía una URL, obtén una captura renderizada con un hash Merkle SHA-256 anclado a Bitcoin a través de OpenTimestamps y almacenado permanentemente en Arweave. Cualquiera puede verificar una captura de forma independiente usando solo el hash y la...

NPMAnalysis

Introduction Recently, security incidents related to NPM poisoning attacks have been emerging one after another. When such incidents occur, the affected NPM packages are often removed or unpublished from the NPM registry, making subsequent security analysis difficult. Based on this situation, a...

onefuzz

❗ AVISO IMPORTANTE ❗ 31 de agosto de 2023. Desde septiembre de 2020, cuando OneFuzz se lanzó como código abierto por primera vez, hemos estado en un viaje para crear un orquestador de primer nivel para ejecutar fuzzers, impulsando la seguridad y la calidad en nuestros productos. Inicialmente...

CVE-2025-55787

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2025-55787

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2025-55787

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

EUVD-2025-210930

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2025-55787

MailData Email Archiving System v4.2 and earlier contains a SQL injection vulnerability, as described in the initial CVE entry. CISA's SSVC assessment rates exploitation as none (no known in-the-wild exploitation at time of assessment), the vulnerability as automatable , and the technical impact ...

CVE-2026-70622 tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()

tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...

SUSE CVE-2026-4635

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to archive the channel before removing persistent notifications which allows authenticated user to crash the server via timing the creation of persistent notification message between the server deleting...

EUVD-2026-49878

Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership verification. Attackers can enumerate room IDs via the rooms listing endpoint and...

CVE-2026-66751

Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership verification. Attackers can enumerate room IDs via the rooms listing endpoint and...

PT-2026-65521

Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any room on the server by sending a DELETE request to the rooms handler without ownership verification. Attackers can enumerate room IDs via the rooms listing endpoint and...

Malicious code in node-fsagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a0392a3ddea9b6099e8501fdb827f586a410323cecea214aa50fc1be42183b The package tarball ships archive-sender.js, which archives the host path /root/.codex, splits the tar into 200MB chunks, reconstructs an npm registr...

EUVD-2026-43162

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfmproductarchive due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

PT-2026-57406

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfm product archive due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

EUVD-2026-37812

BBOT: Path traversal Zip-Slip in unarchive module - incomplete fix for CVE-2025-10284...

CVE-2026-50871

An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a crafted input...

CVE-2026-50871

An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a crafted input...

CVE-2026-50871

An OS command injection vulnerability exists in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 . This flaw allows attackers to execute arbitrary commands on the operating system by providing a specially crafted input . No information regarding a newer vers...