![[EN] CVE-2026-16764: Missing validation, full access](/content/images/size/w720/2026/09/ARTIGO_BLOG_Nosf_Ahnao_EN.png)
[EN] CVE-2026-16764: Missing validation, full access
OWASP DefectDojo is an open-source vulnerability management platform widely used by security teams to centralize, track, and prioritize findings from various scanning tools.
DATABASE // PUBLIC ENTRIES
Research Archive
PT-BR - Beerus Framework: iOS - O canivete suíço para iOS
Em julho deste ano, lançamos a v1.1 do Beerus Framework para Android. Agora, em setembro, damos mais um passo na evolução do projeto
EN - Beerus Framework: iOS - The Swiss Army Knife for iOS
This past July, we released v1.1 of the Beerus Framework for Android. Now, in September, we take another step in the project'
![[PT-BR] CVE-2026-40083: SQL Injection no Cacti](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/08/artigo_blog_cacti.png)
[PT-BR] CVE-2026-40083: SQL Injection no Cacti
Resumo A equipe de pesquisa Yokai, da Hakai Security, identificou uma vulnerabilidade de Injeção de SQL nas versões do Cacti <= 1.2.30.
![[EN] CVE-2026-40083: SQL Injection in Cacti](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/08/en_artigo_blog_cacti.png)
[EN] CVE-2026-40083: SQL Injection in Cacti
Summary The Yokai research team, from Hakai Security, identified a SQL Injection vulnerability in Cacti versions <= 1.2.30. The flaw allows an
CVE-2026-42931: DoS por leitura ilimitada do corpo da requisição no endpoint npm do Gitea
Abstract Quanto de memória uma pequena requisição destinada a alterar a tag de um pacote deveria consumir? Em condições normais, apenas alguns bytes. Afinal,
CVE-2026-42931: DoS via Unbounded Request Body Read in Gitea’s npm Endpoint
Abstract How much memory should a small request intended to change a package's tag consume? Under normal conditions, just a few bytes.
![[EN] Build Your Nightmare - Dissecting CVE-2026-12191](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/07/bispocveen.png)
[EN] Build Your Nightmare - Dissecting CVE-2026-12191
Summary As the global autonomous vehicle market grows, the security of critical driver assistance systems may be hanging by a thread. Our recent research
![[PT-BR] Build Your Nightmare - Destrinchando a CVE-2026-12191](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/07/bispocve.png)
[PT-BR] Build Your Nightmare - Destrinchando a CVE-2026-12191
Resumo Enquanto o mercado global de veículos autônomos cresce, a segurança de sistemas críticos de assistência à direção pode estar por um fio. Nossa