Threat Intelligence Database

OffsetInspect v3.0.0 – track how Defender signature updates shift detection boundaries across a corpus [PowerShell, MIT] Source: https://github.com/warpedatom/OffsetInspect

Browser-Based P2P Messaging App Source: https://enkrypted.chat/

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-57978 is an origin validation error vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a medium severity with a CVSS score of 5.4. An official fix is available from Microsoft to address this issue.

PoCumentary is an open-source command-line tool designed to help security researchers and developers create polished, narrated screen recordings of proof-of-concept (PoC) exploits. It automates arranging multiple terminal panes, coordinating demo steps, recording workflows, and synchronizing captions or narration tied to actual demo events. The tool aims to improve the clarity, reproducibility, and presentation of technical findings. There is no indication that PoCumentary itself introduces a security vulnerability or threat.

ESAFENET's CDG (Content Data Guard) Document Management System, primarily targeting the Chinese market, suffers from basic security vulnerabilities including SQL Injection, cross-site scripting (XSS), and the use of well-known default passwords. Recent scans have been detected targeting these weak default credentials, which are publicly documented and included in exploit templates. Although the product aims to secure document management and prevent data leakage, these fundamental security issues undermine its effectiveness. No specific affected versions or patches are publicly detailed.

NoteGen versions prior to 0.32.0 include a vulnerability where the Tauri shell plugin grants shell:allow-execute capability for bash, python, and python3 with arbitrary arguments by default. This allows JavaScript running in the application's webview to execute operating system commands with the privileges of the NoteGen process. If an attacker can execute scripts in the webview (e.g., via cross-site scripting), they can achieve full remote code execution on the user's machine.

NoteGen versions prior to 0.32.0 contain a cross-site scripting (XSS) vulnerability due to improper sanitization of AI chat responses rendered with markdown-it configured to allow HTML. The application injects this content into the DOM using dangerouslySetInnerHTML without sanitization and with a null Content Security Policy (CSP). Malicious input that influences the AI model's response can cause execution of arbitrary JavaScript in the privileged Tauri webview context when users view the chat response.

GitHub and PyPI have introduced time-based defenses in their dependency management and package publishing processes to mitigate supply chain attacks. GitHub's Dependabot now enforces a default 72-hour cooldown before automatically updating dependencies, reducing the risk of quickly adopting malicious packages. PyPI blocks maintainers from adding new files to package releases older than 14 days to prevent release poisoning. These measures respond to recent high-profile supply chain attacks and aim to limit the impact of compromised packages or publishing tokens.