Security News

[SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection

Full Disclosure - 29 April, 2026 - 12:30

Posted by SBA Research Security Advisory via Fulldisclosure on Apr 29

# GoAnywhere MFT Email HTML Injection #

Link: https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20251120-01_GoAnywhere_MFT_Email_HTML_Injection

## Vulnerability Overview ##

GoAnywhere MFT before 7.10.0 is affected by an HTML injection vulnerability
in its email templating functionality. If an attacker is able to influence
the content of a template variable, malicious HTML can be embedded into
outgoing emails generated by the...

OpenAI Codex Security

Daily Dave - 7 March, 2026 - 14:25

Posted by Dave Aitel via Dailydave on Mar 07

https://openai.com/index/codex-security-now-in-research-preview/

As you might have noticed we've released Codex Security and if you have a
ChatGPT business or enterprise or edu or pro subscription (which is most of
y'all) then you have access ! Just go to chatgpt.com/codex/security and
hopefully it pulls up cleanly for you. If not, probably my fault in some
way.

If you do have access then I'd love it if you would:

1. Say what...

RE//verse, DistrictCon, an Anole Friend

Daily Dave - 2 February, 2026 - 11:48

Posted by Dave Aitel via Dailydave on Feb 02

Last month was DistrictCon, a great conference that I did not attend
because the sky decided to dump snow on Washington, DC. Anyone who has
spent more than ten minutes in that city knows this is how you cancel every
flight out of DCA and turn the roads into skating rinks filled with deeply
furious government contractors. Life is short, so I remained in Miami where
it was 80 degrees and everyone was pretending winter is a myth.

Today it is...
Syndicate content