OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex は、6つの強力なクライアントサイドセキュリティおよびソブリンインテリジェンスワークバンクを統合した、高度でインパクトの大きいサイバーセキュリティモノレポです。完全なデータロックダウンを備えたブラウザローカルメモリ環境内で完全に動作し、このエコシステムはモバイルトリアージ、動的Webテスト、低レベルバイナリ分析、ニューラル脅威マッピングにわたるクロスバーティカル分析機能を提供します。 🧰 6つのコアモジュール 📱 1. Anvil Mobile Labs 役割: モバイルセキュリティトリアージ & リパッケージエンジン 機能: iOS...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +40 more potentially affected by CVE-2026-52725 via @angular/core (>=19.0.0, <=19.2.20)

@angular/core NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.0.5, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.0.0-beta-20260114160010, =0.0.1-canary.0.0, =1.0.0-canary.1 and more Source cves: CVE-2026-52725 Source advisory:...

The vulnerability of the Actor component in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.

The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

Critical: Red Hat Security Advisory: keylime security update

An update for keylime is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

IBM ApplinX Unauthorized Access Vulnerability

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. An unauthorized access vulnerability exists in IBM ApplinX that stems from insufficient server-side enforcement of client-side security, which could be...

CVE-2025-36410

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security...

CVE-2025-36410

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security...

CVE-2025-36410

CVE-2025-36410 affects IBM ApplinX 11.1. An authenticated user could perform unauthorized administrative actions on the server due to server-side enforcement of client-side security. The Red Hat, CIRCL, NVD, and IBM bulletin entries corroborate the same description and indicate the issue resides ...

CVE-2025-36410

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security...

CVE-2025-36410 Multiple vulnerabilities found in IBM ApplinX.

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security...

PT-2026-3626

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security...

@adenta/cms (>=0.0.6, <=1.1.1-0), @alisonquinter17/alieta-ui (0.1.0) +125 more potentially affected by CVE-2025-55183 +1 more via next (>=15.4.0-canary.17, <=15.4.8)

next NPM version =15.4.0-canary.17, =0.0.6, =0.1.0, =1.2.4-main.7f918ee.29, =0.2.0, =1.0.0, =1.0.0-beta.3, =1.0.2, =0.0.1, =0.0.4, =0.0.1, =1.1.0, =0.1.3, =0.5.0 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-NEXT-14400636...

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.28), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.28) potentially affected by CVE-2025-66035 via @angular/common (21.0.0-rc.2)

@angular/common NPM version 21.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - @eui/deps-base =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.28 Source cves: CVE-2025-66035 Source advisory:...

CVE-2025-10161

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This iss...

EUVD-2025-33893

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security...

CVE-2025-2138 IBM Engineering Requirements Management Doors Next data modification

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security...

CVE-2025-2138

IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 are vulnerable to deleting comments from other users due to client-side enforcement of server-side security. Root cause: client-side security enforcement allowing authenticated network users to modify others’ comments. CVSS ...