warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

ROS-20261001-73-0041

The vulnerability in rclone relates to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2026-73846

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...

[SECURITY] Fedora 43 Update: rust-opendal-0.55.0-2.fc43

OpenDAL is an Open Data Access Layer that enables seamless interaction with diverse storage services...

[SECURITY] Fedora 44 Update: rust-opendal-0.55.0-2.fc44

OpenDAL is an Open Data Access Layer that enables seamless interaction with diverse storage services...

The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, relates to unlimited resource distribution. This allows attackers to cause service failures.

The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service...

CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

...

CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

...

CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

...

Potential access to sensitive URLs via CKAN extensions (SSRF)

ImpactThere are a number of CKAN plugins, including XLoader, DataPusher, Resource proxy and ckanext-archiver, that work by downloading the contents of local or remote files in order to perform some actions with their contents e.g. pushing to the DataStore, streaming contents or saving a local cop...

The vulnerability of the OData service of the SAP S/4HANA software platform allows attackers to compromise the integrity of the protected information.

The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of retail software that supports SAP Customer Checkout, related to the storage of information in an open format, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of SAP Customer Checkout software for retail sales is related to the storage of information in an open manner. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality and integrity of the protected information...

CVE-2026-27677

Due to missing authorization checks in the SAP S/4HANA OData Service Manage Reference Equipment, an attacker could update and delete child entities via OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not...

The vulnerability of the Java framework JUnit, related to the storage of critical information in an open manner, allows attackers to exploit their privileges.

The vulnerability of the Java framework JUnit is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow attackers to enhance their privileges...

The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software

The Resource Public Key Infrastructure RPKI secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizations ROAs, manifests, and Certificate Revocation Lists CRLs. These mechanisms are specified across dozens of RFCs. This...

IBM Watsonx.data 安全漏洞

IBM Watsonx.data is an open data lake platform developed by IBM. Versions 2.2 to 2.3 of IBM Watsonx.data contain security vulnerabilities. These vulnerabilities stem from insufficient restrictions on communication between Pods, allowing attackers to transfer data between Pods without any...

SQL Injection

Overview ckan is a world’s leading Open Source data portal platform. It powers dozens of Open Data portals around the world, including data.gov, open.canada.ca and europeandataportal.eu but also regional, research and community organizations. It makes easy to publish, share and find data online a...

PT-2026-37112

Name of the Vulnerable Software and Affected Versions CKAN versions prior to 2.10.10 CKAN versions prior to 2.11.5 Description Accessing views via tokens or unauthenticated requests can mark an endpoint as not requiring Cross-Site Request Forgery CSRF protection. This occurs because the marking i...

autopoc

AutoPoC Automated proof-of-concept deployments on OpenShift...

CVE-2026-27676

Due to missing authorization checks in the SAP S/4HANA OData Service Manage Technical Object Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and...