229 matches found
darkroute
DarkRoute they watching. we watching back. Table of contents What this is Repository layout Architecture Public API Runtime workflow Prerequisites Installation Environment variables Development commands Test commands Security and privacy model Design sources and the token rule Platform limits...
CVE-2026-109080
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-109080 SQL injection in Night Shift bulk license plate search allows cross-organization data access
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
EUVD-2026-97239
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-109080 SQL injection in Night Shift bulk license plate search allows cross-organization data access
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-109080
The Flock Night Shift hosted service is vulnerable to a SQL injection flaw within its bulk license plate search functionality. An authenticated user could exploit this by providing a crafted license plate value to access and read data belonging to other customer organizations, specifically licens...
CVE-2026-109080: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
PT-2026-110477
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
Proposed anti-Flock bills could spell trouble for license plate readers
Automated license plate readers ALPRs are cameras that photograph passing vehicles, read their number plates, and typically log the time, location, and vehicle details. On their own, the images might be used to find a stolen car or locate a suspect. But lately there have been a lot of concerns...
Flock Offers Employees Buyouts as Customers Flee
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program, WIRED has learned...
EUVD-2026-80782
@platejs/core HTML deserialization can trigger browser behavior during parsing...
Flock Once Touted Its Cameras as ‘Made in the USA.’ Now It’s Not So Clear
Flock reveals little about where its license plate readers are assembled, but the answer could have geopolitical and cybersecurity implications...
CVE-2026-88976
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrusted or cross-user HTML to these APIs,...
CVE-2026-88976 @platejs/core HTML deserialization can trigger browser behavior during parsing
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrusted or cross-user HTML to these APIs,...
CVE-2026-88976
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrusted or cross-user HTML to these APIs,...
CVE-2026-88976: Improper Neutralization of Input During Web Page Generation
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrusted or cross-user HTML to these APIs,...
PT-2026-93760
Name of the Vulnerable Software and Affected Versions Plate versions prior to 53.3.11 Plate versions 54.0.0-beta.0 through 54.0.0-beta.1 Description Core HTML deserialization APIs parse supplied HTML strings within the active document. When untrusted or cross-user HTML is passed to these APIs,...
You Can Now Destroy Flock Cameras for Cash in GTA V
A new GTA mod lets you smash and shoot Flock’s automatic license plate readers around the fictional Los Santos...
Malicious code in avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps (npm)
The package avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps was found to contain malicious code. --- Credit: OpenSSF source...
Flock wants privacy to meet surveillance halfway
Flock Safety CEO Garrett Langley says the United States needs a “compromise” between privacy and public safety. It's a neat phrase, except I don’t like to see “compromise” and “privacy” that close together. “When people talk about just one of these, privacy or safety, they’re prioritizing the wro...