[27/03/2026 17:26] Leia a íntegra do relatório final da CPMI do INSS - poder360.com.br

[27/03/2026 14:13] STF tem maioria por voto secreto e prazo de 24 horas para deixar cargos após renúncia de Castro em eleição para mandato-tampão - O Globo

[27/03/2026 10:23] Bolsonaro recebe alta e vai para casa, onde cumprirá prisão domiciliar por 90 dias - Correio Braziliense

[27/03/2026 02:00] O plano de governistas para Vorcaro no relatório final da CPMI do INSS - Metrópoles

[27/03/2026 13:07] Tenente-coronel agrediu PM Gisele dentro de batalhão, diz testemunha - CNN Brasil

[27/03/2026 11:56] Líder do PL diz que entrará com queixa-crime contra Gilmar - poder360.com.br

[27/03/2026 13:26] Decisão de Moraes para prisão domiciliar foi crucial, diz Michelle - poder360.com.br

[26/03/2026 17:03] Lula diz que Brasil quer ajudar EUA contra o crime e pede a Trump para ‘devolver’ bandidos - R7

[26/03/2026 17:23] Deputados batem boca na CPMI do INSS por causa de denúncias contra Lagoinha - em.com.br

[27/03/2026 07:15] Justiça do RJ suspende decreto de Castro que ampliava poderes da Casa Civil - diariodorio.com

[CVE-2025-12559] [Modified: 03-12-2025] [Analyzed] [V3.1 S4.3:MEDIUM] Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

[CVE-2025-12421] [Modified: 03-12-2025] [Analyzed] [V3.1 S9.9:CRITICAL] Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

[CVE-2025-66359] [Modified: 03-12-2025] [Analyzed] [V3.1 S8.5:HIGH] An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability.

[CVE-2025-66360] [Modified: 03-12-2025] [Analyzed] [V3.1 S8.8:HIGH] An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.

[CVE-2025-66361] [Modified: 03-12-2025] [Analyzed] [V3.1 S6.5:MEDIUM] An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load.

[CVE-2025-58294] [Modified: 02-12-2025] [Analyzed] [V3.1 S6.2:MEDIUM] Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

[CVE-2025-58303] [Modified: 02-12-2025] [Analyzed] [V3.1 S8.4:HIGH] UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

[CVE-2025-58307] [Modified: 02-12-2025] [Analyzed] [V3.1 S6.4:MEDIUM] UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

[CVE-2025-58309] [Modified: 02-12-2025] [Analyzed] [V3.1 S6.8:MEDIUM] Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

[CVE-2025-58310] [Modified: 02-12-2025] [Analyzed] [V3.1 S8.0:HIGH] Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

[CVE-2025-58312] [Modified: 02-12-2025] [Analyzed] [V3.1 S5.1:MEDIUM] Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

[CVE-2025-58314] [Modified: 02-12-2025] [Analyzed] [V3.1 S6.6:MEDIUM] Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

[CVE-2025-58315] [Modified: 02-12-2025] [Analyzed] [V3.1 S5.5:MEDIUM] Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

[CVE-2025-58316] [Modified: 02-12-2025] [Analyzed] [V3.1 S7.3:HIGH] DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.

[CVE-2025-64311] [Modified: 02-12-2025] [Analyzed] [V3.1 S5.1:MEDIUM] Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

[CVE-2025-64313] [Modified: 02-12-2025] [Analyzed] [V3.1 S5.3:MEDIUM] Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.

[CVE-2025-64314] [Modified: 02-12-2025] [Analyzed] [V3.1 S9.3:CRITICAL] Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

[CVE-2025-64315] [Modified: 02-12-2025] [Analyzed] [V3.1 S4.4:MEDIUM] Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

[CVE-2025-58302] [Modified: 02-12-2025] [Analyzed] [V3.1 S8.4:HIGH] Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

[CVE-2025-58304] [Modified: 02-12-2025] [Analyzed] [V3.1 S4.9:MEDIUM] Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.