Security Bulletin: MongoDB Enterprised Advanced affected by: Code Injection, Prototype Pollution (CVE-2025-13465, CVE-2026-2950, CVE-2026-4800)

Summary There are vulnerabilities in lodash-4.17.21.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-13465, CVE-2026-2950, CVE-2026-4800. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-13465 DESCRIPTION: Lodash versions 4.0.0 through 4.17.22 are...

Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-39406)

Summary There are vulnerabilities in node-server-1.19.11.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-39406. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-39406 DESCRIPTION: @hono/node-server allows running the Hono application on Node.js. Prio...

Security Bulletin: MongoDB Enterprised Advanced affected by: CRLF Injection (CVE-2026-39983)

Summary There are vulnerabilities in basic-ftp-5.2.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-39983. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-39983 DESCRIPTION: basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows F...

Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2026-35469)

Summary There are vulnerabilities in github.com/moby/spdystream-v0.5.0 used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-35469. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPD...

DAMM

DAMM 一款基于Volatility的开源内存分析工具，旨在为社区提供展示有趣新技术的试验场。这些技术试图通过数据精简和专家知识编码来加快调查过程。 目录 功能特性 使用方法 支持的插件 示例 差异比对 唯一标识符操作 过滤 警告 最后 功能特性 约30个Volatility插件合并为约20个DAMM插件（例如，pslist、psxview等其他元素被整合进一个'processes'插件） 可一次调用运行多个插件 可选择将插件结果存储在SQLite数据库中，用于保存或"缓存"分析 过滤/类型系统，可轻松过滤诸如pid等属性，以查看与某个进程相关的所有信息，并支持字符串的精确或部分匹配等...

Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-41409, CVE-2026-41635)

Summary There are vulnerabilities in mina-core-2.2.4.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-41409, CVE-2026-41635. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA...

passera

注意：我不再有时间继续开发 Passera，但非常欢迎提交拉取请求！最常被要求的功能是更新 Firefox 扩展，因为最近的 API 变更导致当前版本无法使用。 Passera 一个简单的工具，让用户为每个网站设置强而独特的密码，无需在本地或在线服务中存储密码。它可作为 Linux/Mac/Windows 的命令行工具和 Android 应用使用。 Passera 将任何输入的文本转换为长度最多 64 个字符的强密码，并将其复制到剪贴板。为自己设计一个合适的系统，为每个网站生成独特的密码短语，例如将网站名称/URL 与你不会忘记的短语组合起来。要登录时，启动 Passera...

sparty

Sparty - Sharepoint/Frontpage 审计工具 ! 作者: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood 提供支持: SecNiche Security Labs ! Sparty 是一个用 python 编写的开源工具，用于审计基于 sharepoint 和 frontpage 架构的 Web 应用程序。开发该工具的动机是提供一种简单而稳健的方式来审查基于 sharepoint 和 frontpage 的 Web 应用程序的安全配置。由于这些 Web...

Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2025-8916)

Summary There are vulnerabilities in bcpkix-fips-1.0.7.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-8916. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

CVE-2026-82302

CVE-2026-82302 is an Incorrect Authorization (CWE-863) vulnerability in Kibana that allows an attacker with low privileges to modify configurations without proper authorization, via exploiting incorrectly configured access control security levels (CAPEC-180). The CVSS 3.1 score is 8.1 (HIGH) , wi...

CVE-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

EUVD-2026-70663

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-82298

Kibana (Elastic) is affected by an Incorrect Authorization flaw (CWE-863) that can lead to denial of service when access control security levels are incorrectly configured (CAPEC-180). The CVSS 3.1 score is 4.3 (MEDIUM) with a network vector, low complexity, low privileges required, and low avail...

CVE-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

EUVD-2026-70661

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-78596 Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization CWE-862 in Kibana can lead to unauthorized modification of data via Privilege Abuse CAPEC-122. An authenticated user holding Security read-level access in a single Kibana space could trigger Entit...

CVE-2026-78596

Kibana (versions 8.19.2, 9.4.6, 9.5.3 ) is affected by a Missing Authorization flaw (CWE-862) in Entity Analytics migration operations . An authenticated user holding only Security read-level access in a single Kibana space can trigger these migration operations, which perform privileged writes a...

CVE-2026-78596 Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization CWE-862 in Kibana can lead to unauthorized modification of data via Privilege Abuse CAPEC-122. An authenticated user holding Security read-level access in a single Kibana space could trigger Entit...