773 matches found
PrivateSphare
PrivateSphare PrivateSphare는 안전하고 익명의 영지식 파일 저장 및 공유 플랫폼입니다. 사용자는 파일을 업로드하고 검색을 위해 사람이 읽을 수 있는 24단어 암호를 받을 수 있습니다. 계정이 없고, 추적이 없으며, 암호화되지 않은 데이터는 서버의 영구 저장소에 절대 닿지 않습니다. 🛡️ 주요 기능 포스트퀀텀 보안 : 파일은 양자 안전 하이브리드 방식Kyber1024 + AES-256-GCM으로 암호화되어 미래의 양자 컴퓨터 위협으로부터 보호합니다. 영지식 암호화 : 파일은 24단어 BIP-39 암호에서 파생...
gapps
Gapps Gapps는 다양한 보안 프레임워크에 대한 진행 상황을 쉽게 추적할 수 있는 보안 규정 준수 플랫폼입니다. ❄️ Gapps 사이트 보기 🏠 연락에 관심이 있으신가요? 디스코드에 가입해 주세요. 목차 1. 시작하기 2. FAQ 새로운 기능 ❄️ SOC2, NIST CSF, NIST-800-53, CMMC, HIPAA, ASVS, ISO27001, CSC CIS18, PCI DSS 및 SSF가 추가되었습니다! 총 10개의 프레임워크입니다. 멀티 테넌시, OIDC SSO 감사자와의 협업 위험 등록부 파일 저장을 위한...
Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
CVE-2025-46822
CVE-2025-46822 絶対パスによる認証なしの任意ファイル読み取り 説明: Path.resolve メソッドがパストラバーサル対策として使用されている一方で、絶対パスを使用すると内部ファイルが正常に読み取れることを発見しました。このエンドポイントは認証もされておらず、つまり、application-dev.properties で設定されているストアルート files.store.root = /file-store/ から誰でも組織全体のファイルやファイルシステムを読み取ることができ、機密性の高い内部ファイルへの不正アクセスを引き起こします。 詳細:...
coolify-cve-2025-66209-66213
Coolify セキュリティアドバイザリ - CVE-2025-66209 から CVE-2025-66213 報告者: 0xrakan ベンダー: coollabsio/coolify 影響を受けるバージョン: v4.0.0-beta.451 修正済みバージョン: v4.0.0-beta.451 重要度: 重大 CVSS 9.4 概要 Coolify において、アプリケーション/サービス管理権限を持つ認証ユーザーが管理サーバー上で root として任意のコマンドを実行できる、5...
CVE-2026-92994
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
CVE-2026-92994 Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
CVE-2026-92994 Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
EUVD-2026-89622
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
CVE-2026-92994
The Verge3D Publishing and E-Commerce WordPress plugin before version 4.13.1 is vulnerable to unauthenticated Stored XSS . The flaw exists because the plugin's file storage feature fails to validate the contents of uploaded files and serves them back with an attacker-controlled content type. This...
CVE-2026-92994: Improper Neutralization of Input During Web Page Generation
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
PT-2026-103043
The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...
OESA-2026-4069 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: Processing an incomplete post-handshake message for a QUIC connection can cause a...
OESA-2026-4067 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: Processing an incomplete post-handshake message for a QUIC connection can cause a...
OESA-2026-4068 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: Processing an incomplete post-handshake message for a QUIC connection can cause a...
RLSA-2026:67161 Important: git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...
Astra Linux – Vulnerability in git-lfs
Git LFS is an extension of Git for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host’s URL to the git-credential1 command without checking for embedded line-ending control characters. It then sends any credentials it receives back...
ALSA-2026:66364 Important: git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...
PT-2026-84306
A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...