ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root

Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

PT-2026-97020

Name of the Vulnerable Software and Affected Versions Kaneo versions 2.3.12 through 2.12.1 Description Authenticated workspace members with viewer or member roles can delete and modify tasks beyond their assigned permissions. This occurs because the 'PATCH /api/task/bulk' endpoint verifies...

CVE-2026-75101: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...

PT-2026-97017

Name of the Vulnerable Software and Affected Versions Spree versions 5.4.0 through 5.4.3 Spree versions 5.5.0 through 5.5.3 Description An authenticated customer can associate an eligible guest cart with their own account and access the billing and shipping address data stored within that cart...

CVE-2026-63104: Missing Authorization

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

apk-medit v0.2.7

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

CVE-2026-58504 draw.io: Stored XSS on file open via editable=0 sibling cell — patch bypass of CVE-2026-46642

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...

CVE-2026-58504 draw.io: Stored XSS on file open via editable=0 sibling cell — patch bypass of CVE-2026-46642

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...

ROOT-APP-NPM-GHSA-JJ37-3377-M6VV GHSA-jj37-3377-m6vv in nodemailer - Patched by Root

Root has patched GHSA-jj37-3377-m6vv in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-P6GQ-J5CR-W38F GHSA-p6gq-j5cr-w38f in nodemailer - Patched by Root

Root has patched GHSA-p6gq-j5cr-w38f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R7G4-QG5F-QQM2 GHSA-r7g4-qg5f-qqm2 in nodemailer - Patched by Root

Root has patched GHSA-r7g4-qg5f-qqm2 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10942 AIKIDO-2026-10942 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10942 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root

Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-14874 CVE-2025-14874 in nodemailer - Patched by Root

Root has patched CVE-2025-14874 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10941 AIKIDO-2026-10941 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10941 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-62680 CVE-2026-62680 in orval - Patched by Root

Root has patched CVE-2026-62680 in the orval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-71868 CVE-2026-71868 in orval - Patched by Root

Root has patched CVE-2026-71868 in the orval package for Root:npm. Multiple fixed versions available...

PT-2026-96169

Name of the Vulnerable Software and Affected Versions deepstream version 10.1.0 Description An issue exists where the src/services/permission/valve/rules-map.ts file omits RECORD ACTION.PATCH MULTI from the RULES MAP. When an authenticated user performs a PATCH MULTI record operation while the...

ShieldBreak

ShieldBreak - Windows Defender 0day 脆弱性 Microsoft は RoguePlanet 脆弱性 CVE-2026-50656 の適切なパッチ適用に失敗しており、この PoC は完全なパッチバイパスを実証しています。 この PoC は、最新バージョンの Windows 11 25H2 +Canary チャネル と Windows Server 2025 でテストされており、成功率は 100% です。 なお、Windows 10 および対応するサーバーエディション は現在サポートされていませんが、ShieldBreak...