CyberPup

CyberPup 一款免费、开源的网络安全应用，专为普通大众设计。 CyberPup 通过引导式清单、简短课程和泄露检查等工具，帮助非技术用户保障数字生活安全。所有指导均基于 ACSC、CISA 和 NIST 的知名框架，并将其转化为任何人都能实际遵循的通俗语言。 多数个人网络安全工具要么过于技术化，要么只解决单一方面的问题，要么就是彻头彻尾的骗局。CyberPup 试图引导用户全面了解密码、电子邮件安全、设备卫生、社交媒体和泄露检查。 该应用已在 iOS App Store 上线，约有 500...

CVE-2026-40904

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes multiple dataset and dataRequest endpoints that authorize low-privileged project members at the team level instead of binding the...

CVE-2026-35526

creationtimestamp| type| source ---|---|--- 2026-04-07 17:29:48+00:00| seen| Telegram/t7opZ3s7Nl85xZs745vJOFh0FG2Whznv9BGbk6FzHivbIC0 2026-04-18 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjqyamytkd2n...

PT-2026-23636

Name of the Vulnerable Software and Affected Versions Chartbrew versions prior to 4.8.1 Description Chartbrew is a web application that connects to databases and APIs to create charts. Versions of the software prior to 4.8.1 contain a remote code execution issue stemming from the MongoDB dataset...

EUVD-2024-50521

Malicious code in bioql PyPI...

CVE-2025-43862

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-admin users to make unauthorized access a...

IFTTT eWeLink Security Vulnerabilities

IFTTT eWeLink is an IFTTT open source application. It provides remote switching of fans and lights, control of air speed and dimming of lights. A security vulnerability exists in IFTTT eWeLink prior to version 5.2.0, which stems from an improper privilege management vulnerability that allows...

Crater Invoice crater 安全漏洞

Crater Invoice Crater is an open source web and mobile application from Crater Invoice, Inc. for tracking expenses, payments and creating professional invoices and estimates. Crater Invoice crater has a security vulnerability that stems from improper access control in the GitHub repository prior ...

Peerio — End-to-End Encrypted Secure Messenger and File Sharing App

On one end, where governments of countries like U.K is criticizing end-to-end encryption and considering to ban the encrypted communication apps like Snapchat, CryptoCat, WhatsApp and Apple’s iMessage. On the other hand, the Internet community has come up with a new and rather more secure encrypt...