CVE-2026-82267

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

EUVD-2026-67798

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-82267 Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-82267

Komodo (through version 2.3.2) contains a logic flaw in the /execute and /execute/{variant} API handlers, where internal resource identifiers are disclosed and audit log entries are written before permission checks are evaluated. Authenticated users can exploit this by guessing resource names to ...

CVE-2026-82267 Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

GHSA-7GCF-G7XR-8HXJ vulnerabilities

Vulnerabilities for packages: qdrant, zed, atuin, komodo, cedar, yazi, lychee...

CVE-2026-50185 vulnerabilities

Vulnerabilities for packages: deno, komodo, apollo-router, yazi, pixi, mountpoint-s3...

GHSA-3RJW-M598-PQ24 vulnerabilities

Vulnerabilities for packages: deno, komodo, apollo-router, yazi, pixi, mountpoint-s3...

GHSA-22W3-693W-X895 vulnerabilities

Vulnerabilities for packages: komodo...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: vector, bootc, deno, valkey-ldap, komodo, rustup, sentry-cli, sqlx, guestproxyagent, ztunnel-fips, rpm-sequoia, rustls-openssl-client, typst, sccache, sdp-k8s-injector...

EUVD-2005-4357

Malware in sbrugna...

EUVD-2005-4358

Malware in sbrugna...

GHSA-J8QR-RVCV-CRHV Malicious Package in electron-native-notify

All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment and follo...

Malicious Package in electron-native-notify

All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment and follo...

Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers

Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...

Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers

Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...

Malicious Package

Overview All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment...

Komodo Edit 9.2 / 9.3 Buffer Overflow

ActiveState komodoEdit9.2/9.3 preview browser buffer ''' go to preview browser preview with another file or url -payload- preview using In a komodo tab ''' Author: sultan albalawi video:https://www.facebook.com/pentest3/videos/vb.100012552940568/261386070956489/?type=2&theater Tested on:win7 from...

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15966/info Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

EasyJobPortal Sql Injection

Exploit for php platform in category web applications Exploit : EasyJobPortal Sql Injection Date : 22-03-2012 Author : komodo Version : n/a DorK : no dork Home : WwW.softuto.com Email : email protected Vendor : http://www.easyjobportal.com Tested : Ubuntu 11.10 Greetz : Inj3ct0r 1337day Exploit...