EUVD-2026-86387

Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space can call the transclusion / sync-block lookup API with a known sourcePageId and transclusionId pair because the lookup does not enforce...

Developers Insight on Manifest V3 Privacy and Security Webextensions

Webextensions can improve web browser privacy, security, and user experience. The APIs offered by the browser to webextensions affect possible functionality. Currently, Chrome transitions to a modified set of APIs called Manifest v3. This paper studies the challenges and opportunities of Manifest...

Phabricator: Differential "Show Raw File" feature exposes generated files to unauthorised users

Summary: In certain circumstances, a user or mongoose can see a file from a diff they should not be able to see due to a policy. Preface: We are an app agency using a private Phabricator instance to manage projects. This issue prevents us from allowing clients to access our instance as they would...

Threat Outbreak Alert RuleID11651: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35793 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11651 may contain the following files: Name ...