PT-2026-106764

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

PT-2026-107026

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper resource exposure in Extensions allows a remote attacker to obtain cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-106472

Unauthenticated Sensitive Data Exposure in Snapshotify All-in-One Backup & Restore & Migrate = 1.3.2 versions...

PT-2026-106371

Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...

PT-2026-106471

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

PT-2026-106470

Unauthenticated Sensitive Data Exposure in Museder RestoreOne = 2.7.276 versions...

PT-2026-107305

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package allows potential file exposure when the local TechDocs publisher is used via the techdocs.publisher.type variable set to 'local'. In this configuration,...

PT-2026-106388

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning = 1.5.17 versions...

PT-2026-106321

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user handler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

PT-2026-107298

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains a sensitive information exposure issu...

PT-2026-106368

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

PT-2026-106457

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-67270: Improper Certificate Validation

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

PT-2026-107301

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package allows sensitive information exposure within scaffolder task logs. An authenticated user with permissions to create and read scaffolder tasks can...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

PT-2026-106416

Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-103433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...

PT-2026-106468

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

nginx

CVE-2017-7529 Dang Seung-pyo@portfolio10 Resumo Esta prática reproduz a vulnerabilidade de cache CVE-2017-7529 que ocorre no processamento de solicitações Range do servidor Nginx e o comportamento real da vulnerabilidade Vulnerabilidade: possível exposição de dados em cache devido a erro no...

MSMQ-Vulnerability

MSMQ-Sicherheitslabor Dieses Repository dokumentiert eine kontrollierte Laborüberprüfung der Sicherheitsrisiken von Microsoft Message Queuing, mit Schwerpunkt auf defensiver Validierung, Erkennungsnachweisen und Planung von Abhilfemaßnahmen. Das Projekt ist als Portfolio-Artefakt positioniert: Es...