catalyst

Catalyst 반응 속도를 높이세요 웹사이트 - Catalyst 핸드북 문서 - 데모 Catalyst는 인시던트 대응 플랫폼입니다. 경고 처리 및 인시던트 대응 절차를 자동화하는 데 도움을 줄 수 있습니다. 기능 티켓 경고 및 인시던트 관리 티켓은 Catalyst의 핵심입니다. 티켓은 경고, 인시던트, 포렌식 조사, 위협 헌트 또는 조직에서 처리하려는 기타 이벤트를 나타냅니다. 작업 작업은 Catalyst에서 가장 작은 작업 단위입니다. 사용자에게 할당할 수 있으며 상태를 가집니다. 작업은 조사의 진행 상황을 문서화하거나...

WaSonar

免責事項 : このツールは教育目的およびセキュリティ研究のためのみです。開発者は悪用について責任を負いません。責任を持って倫理的にご使用ください。 WaSonar は、WhatsAppプロトコルにおける教育研究、デバイストラッキング、ストレステストのために設計された強力なCLIツールです。Baileys 上に構築されています。 機能 • インストール • 使用方法 機能 リアルタイムデバイストラッキング : すべてのリンクされたデバイス（電話、Web、デスクトップ）の正確なオンライン/オフライン状態を検出します。 デバイス検出 : 対象番号にリンクされたすべてのデバイス（メイン電話 +...

CVE-2026-100598

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100598

The OpenClaw (npm package openclaw ) before version 2026.7.1 contains a logic error in how it binds Signal approval reactions . In affected versions, if unrelated outbound messages and a pending approval exist in the same conversation, a reaction intended for an approval request might incorrectly...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100598: Origin Validation Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-95666

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666

CVE-2026-95666 affects Mattermost versions 11.9.x ≤ 11.9.1 , 11.8.x ≤ 11.8.5 , 11.7.x ≤ 11.7.10 , and 11.10.x ≤ 11.10.1 . The bulk reactions endpoint (POST /api/v4/posts/ids/reactions) fails to limit the length of the post ID array it accepts, allowing an authenticated user to cause excessive dat...

EUVD-2026-84378

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666: Allocation of Resources Without Limits or Throttling

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

PT-2026-96724

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.10 Mattermost versions 11.8.0 through 11.8.5 Mattermost versions 11.9.0 through 11.9.1 Mattermost versions 11.10.0 through 11.10.1 Description An authenticated user can cause excessive database load by...

CVE-2026-73155 cti-transmute Missing Authorization Allows Reactions to Private Comments

Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment. The vulnerable react handler passed an attacker-controlled commentid directly to...

CVE-2026-73155 cti-transmute Missing Authorization Allows Reactions to Private Comments

Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment. The vulnerable react handler passed an attacker-controlled commentid directly to...

OpenClaw: Slack reaction events could ignore reaction notification settings

Summary Slack reaction events could ignore reaction notification settings. In affected versions, a Slack reaction event delivered to the configured app could enter the agent pipeline even when reaction notifications were disabled. This advisory is scoped to the named feature and configuration. It...

NPM: OpenClaw: Slack reaction events could ignore reaction notification settings

NPM: OpenClaw: Slack reaction events could ignore reaction notification settings vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.5.7...

Improper Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Authorization via the reaction notification process. An attacker can trigger unintended agent processing for reaction events by delivering Slack reaction events even when reactio...

GHSA-C8W7-9W9H-X69Q Duplicate Advisory: Slack reaction events could ignore reaction notification settings

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fcvx-5cxc-v5p8. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the...

Duplicate Advisory: Slack reaction events could ignore reaction notification settings

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fcvx-5cxc-v5p8. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the...