CVE-2026-118288

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2026-118288

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally...

EUVD-2026-122507

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally...

Azure File Sync Agent v23.2 Release – November 2026 (KB5072940)

Security Update for Azure File Sync agent version 23.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.2 Release – November 2026 (KB5072940)

Security Update for Azure File Sync agent version 23.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.2 Release – November 2026 (KB5072940)

Security Update for Azure File Sync agent version 23.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.2 Release – November 2026 (KB5072940)

Security Update for Azure File Sync agent version 23.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

bramble

Bramble A password manager that syncs between your devices. Your passwords are not saved on any server, so there's no account to make and no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for...

The Vault by Focused Hunts

The Vault Your Secrets. Your Control. Most password managers want you to trust a company you don't know with your sensitive data. They control the servers and the keys, and you have to hope nothing goes wrong. The Vault does things differently. Your encrypted vault files stay on cloud storage you...

wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Features · Screenshots · Install · How it works · FAQ · Support Features Blocking Up to 750,000 Safari rules across five content blockers, with recommended lists, region...

Brave Android 1.31.91 Security Fixes

Clarified sync setup instructions...

Brave Android 1.48.160 Security Fixes

Added the ability to delete a Brave Sync chain. - Added ability to enable Safe Browsing via brave://flags. - Fixed EIP712Domain data not being displayed in Brave Wallet when signing messages as reported on HackerOne by julianor. Upgraded Chromium to 110.0.5481.77 — refer to Google Chrome...

Brave Desktop 1.84.132 Security Fixes

Disabled "navigator.share" in Tor windows. - Set secure clipboard flag when copying Brave Sync code words as reported on HackerOne by newfunction. 47841 & 47880 Upgraded Chromium to 142.0.7444.60 — refer to Google Chrome advisories for inherited CVEs...

DCSYNCMonitor

DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - ra...

Post Sync Plugin <= 1.1 - Cross-Site Scripting

Post Sync WordPress plugin = 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a maliciou...

FineCMS <5.0.9 - Open Redirect

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2017-11586 info: name: FineCMS 5.0.9 - Open...

CVE-2026-125235

FFmpeg through 9.0.2 contains a heap overflow vulnerability in libavcodec/qsvenc.c that allows attackers to corrupt memory by reusing an undersized pooled QSVFrame buffer when input dimensions increase. Attackers can supply crafted input whose resolution grows mid-stream, transcoded with Intel...

CVE-2026-125235

FFmpeg versions through 9.0.2 are vulnerable to a heap overflow in libavcodec/qsvenc.c . The issue occurs when the application reuses an undersized pooled QSVFrame buffer as input dimensions increase during transcoding. Attackers can provide crafted input where the resolution grows mid-stream—spe...

EUVD-2026-120185

FFmpeg through 9.0.2 contains a heap overflow vulnerability in libavcodec/qsvenc.c that allows attackers to corrupt memory by reusing an undersized pooled QSVFrame buffer when input dimensions increase. Attackers can supply crafted input whose resolution grows mid-stream, transcoded with Intel...