PT-2026-62063

Name of the Vulnerable Software and Affected Versions Data::HashMap::Shared versions prior to 0.14 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using the O EXCL or O NOFOLLOW flags. The segment is created in shm generic.h using th...

PT-2022-5612

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.9.0 Description The issue is related to the missing path canonicalization and base path check for the drive channel in FreeRDP, allowing a malicious server to trick a FreeRDP-based client into reading files outside...

Translate:f summary, history and thoughts

Because Microsoft went the way of HIDING the actual mechanism of Translate:f from all of us original KB article is gone and new Security Bulletin is playing nasty game of downplaying the problem, i have decided to write follow up with sufficient information. HOW IT WORKS -------------------------...