PT-2026-113783

The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests...

CVE-2026-101301: Improper Access Control

The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests...

CVE-2026-75120

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2026-75120

The OpenText™ (EnCase SAFE Agents) component, used by products including OpenText™ Endpoint Investigator , Endpoint Forensics & Response , Information Assurance , and Endpoint Security , contains a security vulnerability. This flaw allows unauthorized or unauthenticated activity to establish an u...

EUVD-2023-60712

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

CVE-2026-75120: Authentication Bypass by Spoofing

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2023-54406

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

CVE-2023-54406 Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

CVE-2023-54406

Frappe versions prior to 14.59.0 and 15.x before 15.5.0 are vulnerable to a sandbox flaw where the frappe.flags.in_safe_exec global flag can be set to False during Server Script execution. This occurs when one server script triggers another, such as by saving a document. Authenticated high-privil...

CVE-2023-54406 Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

CVE-2023-54406 Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

PT-2026-110995

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in safe exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server...

yarasafe

YARASAFE - Verificaciones Automáticas de Similitud de Funciones Binarias con Yara SAFE es una herramienta desarrollada para crear Embeddings de Funciones Binarias por Massarelli L., Di Luna G.A., Petroni F., Querzoni L. y Baldoni R. Puedes usar SAFE para crear tu embedding de funciones para usar...

keystone

Keystone Engine Keystone ist ein leichtgewichtiges, plattform- und architekturübergreifendes Assembler-Framework. Es bietet einige unvergleichliche Funktionen: Multi-Architektur, mit Unterstützung für Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, Syste...

liboqs

liboqs liboqs è una libreria C open source per algoritmi crittografici quantum-safe. liboqs Panoramica Stato Algoritmi supportati Meccanismi di incapsulamento delle chiavi Schemi di firma Schemi di firma con stato Limitazioni e sicurezza Limitazioni della piattaforma Limitazioni del supporto Avvi...

CVE-2026-107335

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...

CVE-2026-107335 Improper Handling of Highly Compressed Data in Malcolm

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...

CVE-2026-107335 Improper Handling of Highly Compressed Data in Malcolm

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...

CVE-2026-107335

The Malcolm platform is vulnerable to a data amplification issue due to improper handling of highly compressed data in the scripts/safe-extract.py upload-processing pipeline. While the system enforces limits on container archives (like zip, tar, rar, and 7z), it fails to apply these limits to sin...