talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

Cisco Secure Firewall Security Bypass

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

TableNG Code Execution

The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Microsoft SharePoint Server

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to perform spear-phishing...

WordPress wp-login.php Code Execution

The vulnerability of the wp-login.php file in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE-SU-2026:3424-1 Security update for python3-pyOpenSSL

This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in settlsextservernamecallback callback can result in connection not being cancelled and allows for possible security measure bypassing bsc1259804...

Windows Print Spooler Information Disclosure

The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...

Microsoft SQL Server Buffer Overflow Information Disclosure

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass

Device code phishing abuses a legitimate authentication feature designed for devices with limited input capabilities. This article breaks down how the technique works, examines a recent observed case, and outlines the layered security measures organizations can implement...

Mattermost Auth Bypass

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Fastify Framework Security Bypass

The vulnerability of the Fastify framework, a Node.js software platform, is related to improper validation of the specified data type during input processing. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

BitLocker Security Bypass

The vulnerability of the BitLocker disk encryption technology for Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security measures...

Windows Secure Boot Bypass

The vulnerability of Windows Secure Boot in operating systems involves a breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to circumvent existing security measures...

Windows Telephony Service Disclosure

The vulnerability of the Windows operating system’s Telephony Service is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Mattermost Auth Bypass

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Mattermost Authentication Bypass

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

PT-2026-39987

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performin...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Versions of Mozilla Firefox for Android prior to version 150 contain security vulnerabilities, which stem from bypassing security measures...