RSS Anyway logo
HotLatestFollowingStatusAbout

corgea.com

Sign in to follow
corgea.com
RSSAtomJSON
  1. 31.
    CVE-2026-55407: `buffa` and `connectrpc` amplify tiny protobuf payloads into Rust OOMs
    corgea.com · /rss.xml
    ▲ 0 · Jul 1
  2. 32.
    CVE-2026-58302: LinuxCNC rtapi_app path traversal to root
    corgea.com · /rss.xml
    ▲ 0 · Jun 30
  3. 33.
    Weekly Briefing - 30-06-2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 30
  4. 34.
    CVE-2026-13502: antlr4-maven-plugin build-state deserialization
    corgea.com · /rss.xml
    ▲ 0 · Jun 28
  5. 35.
    ImmobiliareLabs Backstage plugins compromised with Phantom Gyp Miasma payload
    corgea.com · /rss.xml
    ▲ 0 · Jun 26
  6. 36.
    Changelog - June 25, 2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 25
  7. 37.
    CVE-2026-53571: Vite `server.fs.deny` bypass leaks protected files on Windows
    corgea.com · /rss.xml
    ▲ 0 · Jun 25
  8. 38.
    Leo Platform npm packages compromised with Phantom Gyp Miasma toolkit
    corgea.com · /rss.xml
    ▲ 0 · Jun 25
  9. 39.
    CVE-2026-12866: `expr-eval` turns untrusted formulas into Node.js code execution
    corgea.com · /rss.xml
    ▲ 0 · Jun 24
  10. 40.
    Weekly Briefing - 23-06-2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 23
  11. 41.
    Nodemailer raw option bypasses disableFileAccess and disableUrlAccess
    corgea.com · /rss.xml
    ▲ 0 · Jun 19
  12. 42.
    Changelog - June 18, 2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 18
  13. 43.
    Introducing Corgea AI Pentesting
    corgea.com · /rss.xml
    ▲ 0 · Jun 18
  14. 44.
    Mastra npm scope takeover used easy-day-js to Trojanize 141-143 packages
    corgea.com · /rss.xml
    ▲ 0 · Jun 17
  15. 45.
    GlassWASM used TinyGo WebAssembly and Solana memos in trojanized Open VSX extensions
    corgea.com · /rss.xml
    ▲ 0 · Jun 16
  16. 46.
    Introducing Corgea Skill Scanning
    corgea.com · /rss.xml
    ▲ 0 · Jun 16
  17. 47.
    Corgea Auto-Discovery and Learning
    corgea.com · /rss.xml
    ▲ 0 · Jun 16
  18. 48.
    Weekly Briefing - 16-06-2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 16
  19. 49.
    CVE-2026-50010, 50011, 50020, and 50560: Netty 4.1.135 / 4.2.15 fix TLS, HTTP/1.1, HTTP/2, and Redis parser flaws
    corgea.com · /rss.xml
    ▲ 0 · Jun 15
  20. 50.
    Weekly Briefing - 15-06-2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 15
  21. 51.
    Introducing Corgea Security Design Reviews
    corgea.com · /rss.xml
    ▲ 0 · Jun 15
  22. 52.
    Atomic Arch turned orphaned AUR packages into npm and Bun malware launchers
    corgea.com · /rss.xml
    ▲ 0 · Jun 14
  23. 53.
    CVE-2026-45783: @libp2p/kad-dht lets unauthenticated peers fill disk with unvalidated PUT_VALUE records
    corgea.com · /rss.xml
    ▲ 0 · Jun 12
  24. 54.
    CVE-2026-42305 and CVE-2026-47712: Dulwich 1.2.5 fixes Windows checkout abuse and format_patch path traversal
    corgea.com · /rss.xml
    ▲ 0 · Jun 12
  25. 55.
    Changelog - June 11, 2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 11
  26. 56.
    CVE-2026-41840 and CVE-2026-41842: Spring 7.0.8 fixes WebFlux multipart and versioned-resource DoS flaws
    corgea.com · /rss.xml
    ▲ 0 · Jun 10
  27. 57.
    dbmux npm package used Phantom Gyp to execute Miasma during install
    corgea.com · /rss.xml
    ▲ 0 · Jun 10
  28. 58.
    onering 1.4.1 used Cargo build.rs to exfiltrate private source diffs
    corgea.com · /rss.xml
    ▲ 0 · Jun 10
  29. 59.
    Hades PyPI follow-on hit MCP packages and Python typosquats
    corgea.com · /rss.xml
    ▲ 0 · Jun 9
  30. 60.
    Weekly Briefing - 09-06-2026
    corgea.com · /rss.xml
    ▲ 0 · Jun 9