http-garden

The HTTP Garden The HTTP Garden is a collection of HTTP servers and proxies configured to be composable, along with scripts to interact with them in a way that makes finding vulnerabilities much much easier. For some cool demos of the vulnerabilities that you can find with the HTTP Garden, check...

CVE-2026-62125

Unauthenticated PHP Object Injection in Asia Garden = 1.3.1 versions...

CVE-2026-62125 WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Asia Garden = 1.3.1 versions...

CVE-2026-62125

The Asia Garden WordPress theme (versions

EUVD-2026-96510

Unauthenticated PHP Object Injection in Asia Garden = 1.3.1 versions...

WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Asia Garden versions = 1.3.1...

New York City Lawmakers Push to ‘Ban the Scan’ at MSG

At a press conference outside Madison Square Garden, politicians, musicians, and privacy advocates argued for tighter restrictions on how public venues deploy biometric surveillance...

Facial Recognition at Madison Square Garden

Last month, the story broke alternate link that Madison Square Garden uses facial recognition software on everyone entering the facility, and--among other groups--flags activists that oppose using facial recognition. Turns out that the system was shut off for Taylor Swift's wedding. Evan Greer--o...

For Taylor Swift, Madison Square Garden’s Controversial Cameras Briefly Went Dark

MSG’s sprawling surveillance system can monitor guests down to the second. Its owners made an exception for the pop star’s rehearsal dinner...

Hackers Claim to Leak Stolen Madison Square Garden Data

Plus: Gay bars in San Francisco using face scanners, France quits Palantir, Apple plans to change its private email, and more...

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

Canon My Image Garden 安全漏洞

Canon My Image Garden is a photo management and printing software developed by the Japanese company Canon. Versions of Canon My Image Garden 3.6.8 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process, whi...

CVE-2026-6891: Improper Link Resolution Before File Access

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

PT-2026-44708

Name of the Vulnerable Software and Affected Versions My Image Garden for macOS versions prior to 3.6.9 Description Improper handling of symbolic links in the installer allows a local attacker with login privileges to use a specially crafted symbolic link during installation to modify permissions...

A New York Cop Got Injured at a Boxing Match. Now Madison Square Garden Is Banning His Lawyer

Attorney John Scola is representing a police officer who is suing over injuries allegedly sustained while working security at an MSG property in 2025...

coxy (>=0.0.2, <=0.0.4), threed-garden (>=0.17.0-alpha.9, <=0.17.3-centauri.0) potentially affected by CVE-2026-42349 via @clerk/nextjs (>=6.3.1, <=6.28.1)

@clerk/nextjs NPM version =6.3.1, =0.0.2, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2026-42349 Source advisory: SNYK:JS-CLERKNEXTJS-16347747...

The Shocking Secrets of Madison Square Garden’s Surveillance Machine

Famously vengeful Knicks owner Jim Dolan has long spied on people at his iconic arenas. WIRED goes deep inside the operation that allegedly tracked a trans woman, lawyers, protesters, and more...