EUVD-2026-95985

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

CVE-2026-107857 Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

CVE-2026-107857

The Mindwtr mobile application (versions prior to 1.1.5 ) suffers from a vulnerability where the Cloud sync bearer token and WebDAV password are stored in plaintext within unencrypted AsyncStorage . Specifically, these credentials are stored under the keys @mindwtr_cloud_token and @mindwtr_webdav...

CVE-2026-107857 Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

Malware in cloud-baileys

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview cloud-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

CVE-2026-107839

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

CVE-2026-107839 ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

EUVD-2026-95934

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

Malicious code in @galicia-toolkit-nestjs/commons (npm)

Source: amazon-inspector eae27acb3901d275439e482d51a1451df67c1a6b2011f35881253a3fa8d2456b The package ships a tiny index.js that requires a bundled ELF at prebuilds/linux-x64/metrics.node inside a swallow-all try/catch on module load. No C/C++ source, binding.gyp, or node-gyp/prebuild tooling is...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, git-sync-fips, crossplane-provider-aws-pinpoint-fips, grype-db, redpanda-operator,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, ksops-fips, redis-operator, crossplane-provider-aws-account-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-openshift-routes, prometheus-statsd-exporter-fips, git-sync-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, envconsul, yace, dbmate, podinfo, kuma, terraform-provider-azuread, neuvector-scanner, knative-client, jaeger, rancher-fleet, bank-vaults, rancher-webhook, argo-events, mongodb-kubernetes-operator, terraform-provider-azapi, harbor,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, envconsul, yace, dbmate, podinfo, kuma, terraform-provider-azuread, neuvector-scanner, knative-client, jaeger, rancher-fleet, bank-vaults, rancher-webhook, argo-events, mongodb-kubernetes-operator, terraform-provider-azapi, harbor,...