中文 English Français Русский Español العربية

EScan and M-Kavach have issues

Hacker News Ask2026-10-25 23:490 views

eScan CERT-In 7.2.0.70 trust any packages whose IDs contain "escan", and even when it doesn't it's scan checks only metadata and not any code.

M-Kavach 2 has an unexposed email breach checker which I hope is just WIP code that was pushed, because it has no TLS certification validation logic. MITM attacks would get unencrypted email IDs.

Comments URL: https://news.ycombinator.com/item?id=50232855

Points: 1

# Comments: 0

Source：https://news.ycombinator.com/item?id=50232855

My favorites

PreviousShow HN: Directory 958 inspirational artisans, craftspeople, smiths, for post-AI NextAsk HN: Can we do something about this impending AI dystopia

Convert YAML to JSON in the Browser (and JSON to YAML) Without Uploading the File

If you keep configuration in YAML and hand it to something that wants JSON, the conversion happens constantly — in CI, i

0dev.to

Vercel agent-desktop: computer use for coding agents through the accessibility tree

Vercel Labs released agent-desktop this week, a free, open source tool that gives AI coding agents computer use on macOS

0dev.to

WARN Act and Job Search — How to Use the 60-Day Notice Period to Find Your Next Job

WARN Act and Job Search — How to Use the 60-Day Notice Period to Find Your Next Job A WARN notice is not a pink slip han

0dev.to

Node.js SMS Verification Code: Generating and Sending One-Time Passwords via API Integration

Node.js SMS Verification Code: Generating and Sending One-Time Passwords via API Integration Short answer: use Node.js c

0dev.to

Introducing Takeout Mender – A Free Tool to Recover Metadata from Google Takeout

Hey everyone! I've been working on a project called Takeout Mender, and I'm excited to share it here. Google Takeout exp

0dev.to

DeepSeek's Open-Source "Super-Agent" Codes Without Being Asked

DeepSeek's Open-Source "Super-Agent" Codes Without Being Asked DeepSeek's Harness team open-sourced a research prototype

0dev.to GitHub

EScan and M-Kavach have issues

Related posts

Convert YAML to JSON in the Browser (and JSON to YAML) Without Uploading the File

Vercel agent-desktop: computer use for coding agents through the accessibility tree

WARN Act and Job Search — How to Use the 60-Day Notice Period to Find Your Next Job

Node.js SMS Verification Code: Generating and Sending One-Time Passwords via API Integration

Introducing Takeout Mender – A Free Tool to Recover Metadata from Google Takeout

DeepSeek's Open-Source "Super-Agent" Codes Without Being Asked