talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

The vulnerability of the TableNG component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary code.

The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server allow attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to perform spear-phishing...

The vulnerability of the wp-login.php file within the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the wp-login.php file in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE-SU-2026:3424-1 Security update for python3-pyOpenSSL

This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in settlsextservernamecallback callback can result in connection not being cancelled and allows for possible security measure bypassing bsc1259804...

The vulnerability of the print spooler driver in Windows operating systems allows attackers to disclose sensitive information that is protected by this driver.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...

The vulnerability of the Microsoft SQL Server database management system, related to overflow in dynamic memory buffers, allows attackers to disclose sensitive information that is protected by this system’s security measures.

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the Fastify framework, a Node.js-based software platform, arises from improper validation of the specified data type. This allows attackers to bypass existing security measures.

The vulnerability of the Fastify framework, a Node.js software platform, is related to improper validation of the specified data type during input processing. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of Windows Secure Boot security technology allows attackers to bypass existing security mechanisms.

The vulnerability of Windows Secure Boot in operating systems involves a breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to circumvent existing security measures...

The vulnerability of the BitLocker disk encryption technology for operating systems with Windows, which allows a hacker to bypass existing security mechanisms

The vulnerability of the BitLocker disk encryption technology for Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security measures...

The vulnerability of the Windows operating system’s Telephony Service allows attackers to disclose protected information.

The vulnerability of the Windows operating system’s Telephony Service is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a hacker to bypass existing security mechanisms.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

PT-2026-39987

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performin...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Versions of Mozilla Firefox for Android prior to version 150 contain security vulnerabilities, which stem from bypassing security measures...

The vulnerability of Windows Kernel Memory in the Windows operating system allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows Kernel Memory in the operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors

This article investigates the robustness of vision systems in Connected and Autonomous Vehicles CAVs, which is critical for developing Level-5 autonomous driving capabilities. Safe and reliable CAV navigation undeniably depends on robust vision systems that enable accurate detection of objects,...