Comparison Overview
Central Securities Depository (KCSD)
Central Securities Depository (KCSD)
30/8, Satpayev St., Almaty, 050040, KZ
Last Update: 27/07/2026
KCSD was established in 1997. It is a non-profit organization and unique organization on the territory of the Republic of Kazakhstan, executing depository activities and maintaining securities holders register system. А voluntary reorganization of KCSD and the Integrate...
Mahindra Finance
Dr. G.M. Bhosale Marg, P.K. Kurne Chowk, Worli, Mumbai, 400018, IN
Last Update: 02/04/2026
Mahindra & Mahindra Financial Services Limited (Mahindra Finance), part of the Mahindra Group, is one of India's leading non-banking finance companies. Focused on the rural and semi-urban sector, the Company has over 10 million customers and has an AUM of over USD 11 B...
Compliance Ranges Comparison
Central Securities Depository (KCSD)
Mahindra Finance
Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
Central Securities Depository (KCSD) has 45.36% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Mahindra Finance in 2026.
Incident History - Central Securities Depository (KCSD) (X = Date, Y = Severity)
Central Securities Depository (KCSD) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Mahindra Finance (X = Date, Y = Severity)
Mahindra Finance cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Central Securities Depository (KCSD)
Mahindra Finance
FAQ
Latest Global CVEs
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op_params results in deserialization. The attack may be initiated remotely. This vulnerability is distinct from CVE-2026-34159 (GHSA-j8rj-fmpv-wcxw, PR #20908), which only added a buffer==nullptr rejection in create_node() and does not validate op or op_params. The reported GitHub issue was closed automatically due to inactivity.
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 5d8515842fd1ab2c3a9f2dde9ffca907aa334ea9. Upgrading the affected component is recommended.
- https://github.com/CTFd/CTFd/
- https://github.com/CTFd/CTFd/commit/5d8515842fd1ab2c3a9f2dde9ffca907aa334ea9
- https://github.com/CTFd/CTFd/pull/3026
- https://github.com/CTFd/CTFd/releases/tag/3.8.4
- https://mblunt.dev/writeups/ctfd-open-redirect/
- https://vuldb.com/cve/CVE-2026-78145
- https://vuldb.com/submit/882469
- https://vuldb.com/vuln/394533
- https://vuldb.com/vuln/394533/cti
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.